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About this guide 



This document provides procedures for Storage Area Network (SAN) administrators to set up and manage 
HP StorageWorks SANs. It is specific to XPath Operating System 7.4.x and ttie Multi-protocol (MP) Router 
running XPath OS 7.4.x 

Intended audience 

This guide is intended for system administrators and technicians who are experienced with the following: 

• HP StorageWorks Fibre Channel SAN switches 

• XPath OS 74.x or earlier 

Related documentation 

Documentation, including white papers and best practices documents, is available on the HP web site: 
http:/ / www.hp.com/ country/ us/ eng/ prodserv/ storage.html 

^ IMPORTANT: For late-breaking, supplemental information, access the latest version of the HP 
StorageWorks XPath OS 7.4.x release notes using the following steps. 



To access current XPath OS documents: 

1 . Locate the IT storage products section of the web page. 

2. Under Networked storage, click SAN infrastructure. 

3. From the SAN Infrastructure web page, locate the SAN Infrastructure products section. 

4. Click Multi-protocol Routers and Gateways. 

5. To access XPath OS 7.4.x documents (such as this document), click B-Series Multi-Protocol Router. 
The HP StorageWorks B-Series Multi-Protocol Router overview page is displayed. 

6. Go to the Product Information section, located on the right side of the web page. 

7. Click Technical documentation. 

8. Follow the onscreen instructions to download XPath OS 7.4.x documents. 
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Document conventions and symbols 



Table 1 Document conventions 



Convention 


Element 


Medium blue text: Figure 1 


Cross-reference links and e-mail addresses 


Medium blue, underlined text 

1 httn ■ / /www hn ("oml 

llllll^i/ / VVVVVVill)-^ • ^ W 1 1 1 I 


Web site addresses 


Bold font 


• Kpv nnmp*; 

1 \^ y 1 1 V-1 1 1 

• Text typed into a GUI element, such as into a box 

• GUI elements that are clicked or selected, such as menu and list 
items, buttons, and check boxes 


Italics font 


Text emphasis 


Monospace font 


• File and directory names 

• System output 

• Code 

• Tpyt tv/npH nt thp mmmnnn inp 

1 ^yvi 1 y k^^\tfi \ji 1 111^ V- V/ 1 1 1 1 1 1 V-1 1 1 u 1 1 1 1 ^ 


Monospace, italic font 


• Code variables 

• Command-line variables 


Monospace, bold font 


Emphasis of file and directory names, system output, code, and text 
typed at the command line 



A WARNING! Indicates that failure to follow directions could result in bodily hiarm or death. 



A CAUTION: Indicates that failure to follow directions could result in damage to equipment or data. 



^ IMPORTANT: Provides clarifying information or specific instructions. 



NOTE: Provides additional information. 



Rack stability 



A WARNING! To reduce the risk of personal injury or damage to equipment: 

• Extend leveling jacks to the floor. 

• Ensure that the full weight of the rack rests on the leveling jacks. 

• Install stabilizing feet on the rack. 

• In multiple-rack installations, secure racks together. 

• Extend only one rack component at a time. Racks may become unstable if more than one component is 
extended. 
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HP technical support 

Telephone numbers for worldwide technical support are listed on the HP support web site: 
http:/ / www.hpxom/ support/ . 

Collect the following information before calling: 

• Technical support registration number (if applicable) 

• Product serial numbers 

• Product model names and numbers 

• Applicable error messages 

• Operating system type and revision level 

• Detailed, specific questions 

For continuous quality improvement, calls may be recorded or monitored. 

HP strongly recommends that customers sign up online using the Subscriber's choice web site: 
http:/ / www.hp.com/ go/ e-updates . 

• Subscribing to this service provides you with e-mail updates on the latest product enhancements, newest 
versions of drivers, and firmware documentation updates as well as instant access to numerous other 
product resources. 

• After signing up, you can quickly locate your products by selecting Business support and then Storage 
under Product Category. 

HP-authorized reseller 

For the name of your nearest HP-authorized reseller: 

• In the United States, call 1-800-282-6672. 

• Elsewhere, visit the HP web site: http:/ / www.hp.com . Then click Contact HP to find locations and 
telephone numbers. 

Helpful web sites 

For other product information, see the following HP web sites: 

• http://www.hp.com 

• http:/ / www.hp.com/ go/ storage 

• http://www.hp.com/support/ 

• http://www.docs.hp.com 
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1 Introducing XPath OS features 



XPath OS is the operating system for the HP StorageWorks MP Router. The MP Router is an open, intelligent 
switching platform for hosting multi-protocol routing services and other applications within a SAN fabric. 

In addition to the full set of standard Fibre Channel switch features, XPath OS supports optional HP 
multi-protocol routing services and interoperates with the HP Fabric OS. The MP Router can be used to 
connect HP fabrics to McDATA fabrics. 

This chapter contains the following sections: 

• MP Routing Services, next 

• Fibre Channel features, page 1 3 

• HP Fabric OS support, page 14 

• Daemon overseer service, page 1 5 

• High availability, page 17 

MP Routing Services 

HP multi-protocol routing services provide options for extending SAN benefits over multiple networks to 
larger SAN sizes, and across longer distances. Using these services, you can interconnect devices between 
SAN fabrics without merging those fabrics, thereby providing a more secure and flexible storage 
networking foundation. 

These services include: 

• HP FC-FC Routing Service for SAN connectivity 

• HP Fibre Channel over IP (FCIP) Tunneling Service for SAN extension over distance 

• HP iSCSI Gateway Service for sharing Fibre Channel resources with Internet Small Computer Systems 
Interface (iSCSI) devices 

The services are summarized in the following sections. 

FC-FC routing service 

The FC-FC Routing Service enables devices located in separate SAN fabrics to establish communication 
without requiring the fabrics to merge into a single large SAN. By using this service, you can interconnect 
devices without having to redesign or reconfigure the entire environment. You can connect physically 
separate SANs into logical SANs (LSANs) in a seamless manner. LSANs are ideal for: 

• Simplifying SAN design, implementation, and management 

• Providing a seamless way to share resources across multiple SANs without the complexity of physically 
merging those SANs 

• Creating a more unified SAN environment with easier interconnection and support for SANs and SAN 
resources deployed for different purposes 

• Allowing routing between HP and McDATA fabrics 

For details on the capabilities, terminology, and use of FC-FC routing, see Chapter 4, "Using the FC-FC 
Routing Service." 
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FCIP Tunneling Service 



The FCIP Tunneling Service enables you to extend the Fibre Channel SAN over distances that would be 
Impractical or too expensive with native Fibre Channel links. The service employs a proprietary transport 
protocol that allows the transparent interconnection of geographically distributed SANs through an 
IP-based network. 

XPath OS supports FCIP between two MP Routers only, not between an MP Router and another switch 
model. 

FCIP enables Fibre Channel frames to tunnel through IP networks by dividing frames, encapsulating the 
result in IP packets when they enter the tunnel, and then reconstructing them as they leave the tunnel. 
Figure 1 illustrates a simple FCIP tunneling configuration. 



Figure 1 Simple FCIP tunneling configuration 

Chapter 5, "Using the FCIP Tunneling Service," further describes these concepts and provides procedures 
for configuring FCIP. 



The iSCSI is a protocol that defines the processes for transferring block storage over TCP/IP networks by 
encapsulating SCSI commands into TCP and transporting them over the network via IP. The iSCSI Gateway 
Service enables organizations to integrate low-cost Ethernet-connected servers into HP StorageWorks Fibre 
Channel SANs by bridging the iSCSI protocol to the Fibre Channel protocol. This capability allows iSCSI 
servers to leverage shared SAN resources, improving asset utilization and enabling new applications. This 
integration greatly reduces the cost of connecting servers to centrally managed storage and helps provide 
a cost-effective solution to introduce utility computing into the enterprise. 

Chapter 6, "Using the iSCSI Gateway Service," further describes these concepts and provides procedures 
for configuring an MP Router for use as an iSCSI gateway. 



Combining services 

Using FCIP tunneling along with FC-FC routing enables you to keep two fabrics separate instead than 
merging them into a single fabric, which would permit any-to-any connectivity among all devices. For 
example, you can build a configuration similar to that shown in Figure 2, in which FCIP tunnelling and an 
IP network provide transport between two MP Routers. 



iSCSI cannot run concurrently with FCIP tunneling on the same port, but both can be used concurrently on 
the same switch without restrictions. 

If you combine iSCSI and FC or iSCSI and FCR and FCIP, the iSCSI initiators can access FC storage only 
within the backbone fabric. 




Router 



Router 



iSCSI Gateway Service 
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Router Router 
Figure 2 Combining FCIP tunneling and FC-FC routing services 

Fibre Channel features 

XPath OS provides the Fibre Channel features described in Table 2. 



Table 2 XPath OS Fibre Channel switch features 



Feature 


Description 


Arbitrated-loop support 


The MP Router supports only one arbitrated-loop physical address (AL_PA) 
device per port. Hov/ever, you can use MP Routers in fabrics v/here multiple 
loop devices are directly attached to Fabric OS-based switches, such as the 
HP StorageWorks SAN Switch 2/32. 


Gigabit Ethernet (GigE) 
support 


XPath OS supports GigE port connections, which in turn support the optional 
multi-protocol routing services. Each Gigabit Ethernet port has its own IP 
address and supports address resolution protocol and ping. Ports must be 
specifically configured as GigE ports. When configured as GigE, ports are 
equivalent to 1 OOOBase-SX or lOOOBase LX. 


Exchange-based trunking 


The XPath OS exchange-based trunking feature optimizes load sharing across 
interswitch links (ISLs). It increases overall bandwidth by grouping all ISLs 
between the same pair of switches and load-sharing traffic across all equal 
path links. This functionality works between two MP Routers, as well as from 
an MP Router to any other Fabric OS-based switch. For more information, see 
Chapter 8, "Using ISL trunking." 


Management access ports 


The MP Router provides two 10/100 Mbit/sec Ethernet ports, which are 
capable of being configured as a single IP address or as two unique IP 
addresses, and an RS-232 port. If you configure the Ethernet ports with 
unique IP addresses, when the router is joined to a fabric, the router must 
have a virtual Ethernet IP identity for routing. You can handle this by setting a 
virtual management IP address for the router. See the HP StorageWorks XPath 
OS 7.4.x command reference guide for more information. 


Multiple user accounts 


XPath OS allows you to create multiple user accounts and assign 
administrative or user roles. 


Name Server support 


The MP Router includes an FC-GS3-compliant Name Server implementation. 
The Name Server supports all commands specified as "Required" in the 
FGMI Fibre Channel specification. 
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Table 2 XPath OS Fibre Channel switch features (continued) 



Feature 


Description 


Point-to-point and loop 
mode topologies 


MP Router ports can be configured to support either point-to-point mode or 
loop mode using the portCf gTopology command. 

When in default point-to-point mode, a port automatically detects whether 
there is another switch on the other end of the connection (where the port 
automatically becomes an E_Port) or whether there is a host or target on the 
other end (where the port automatically becomes an F_Port). 


Threshold management 


XPath OS provides threshold management functions for temperature sensing 
and power supplies, as well as warnings for fan failures. 


User interfaces 


XPath OS provides a graphical user interface. Advanced Web Tools, and a 
command line interface (CLI). The CLI is described in the HP StorageWorks 
XPath OS 7.4.0 Advanced Web Tools administrator guide. The CLI 
commands are described in the HP StorageWorks XPath OS 7.4.x command 
reference guide. 

In normal operation, the CLI interface is used by running a telnet or SSH 
session from an administrative workstation networked to an MP Router 
Ethernet management interface. 


Zone server support 


The MP Router zone server implementation complies with Fabric OS 2.6.x, 
3.x, and 4.x. 

In multiswitch configurations, the MP Router also complies with the FC-SW2 
zone server specification. The maximum number of members allowed in the 
zone server depends on the size of the zone database; the effective zone 
database can have a maximum of 4096 zone members and 1 024 zones 
(including fabric assisted zones). The maximum zoning database size is 1 28 
KB. 



Fabric OS support 

The HP StorageWorks MP Router automatically forms a fabric when an enabled port is connected to 
another switch running a compatible Fabric OS version. For best performance, all fabric switches should 
be updated to the latest firmware. Firmware updates are available to OEMs, partners, and customers with 
support service contracts on the HP Fibre Channel switches web site: 
http:/ /hi 8006. www 1 .hp.com/storage/saninfrastructure/switches.html . 

To download: 

1. In the Storage products section, click SAN infrastructure. 
The SAN Infrastructure page opens. 

2. In the SAN Infrastructure products section, click Multi-protocol Routers and Gateways. 
The Multi-protocol routers and gateways page opens. 

3. Click B-Series Multi-Protocol Router. 

The HP StorageWorks B-Series Multi-Protocol Router page opens. 

4. In the Product Information section, click Software, firmware & drivers. 
The tecnical support -HP B-series Multi-protocol Router page opens. 

5. In the I would like to section, click download drivers and software. 
The download drivers & software - specifiy product name page opens. 

6. In the select your product section, click either HP StorageWorks Multiprotocol Base 8-port Router or HP 
StorageWorks Multiprotocol Full 1 6-port router 

The appropriate specify operating system page opens. 

7. In the select operating system section, click Cross operating system (BIOS, Firmware, Diagnostics, etc.). 

The approprate download drivers and software page opens. 

8. Scroll down to the Firmware section and click the appropriate download button. 

9. Follow the prompts in the File Download dialog box. 
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PID mode requirements 

Either core port identifier (PID) mode or extended-edge PID mode must be enabled to successfully execute 
the XPath OS. In its default configuration, XPath OS has core PID mode enabled. 

All switches within a fabric must have the same PID mode enabled. For more information on configuring a 
fabric PID mode, see "Verifying the PID mode" on page 20. 

For information on configuring the PID mode in Fabric OS, see the HP StorageWorks Fabric OS 5.x 
administrator guide. 



^ NOTE: The PID mode for the MP Router need not match that of the attached fabrics; however, the PID 
mode set on the EX_Port must match. To set the PID mode, see "Setting the PID mode" on page 20. 



Feature compatibility 

XPath OS does not support the following Fabric OS features: 

• The interopMode command. The MP Router segments from a fabric that has interopMode enabled. 
See the interopMode command in the HP StorageWorks XPath OS 7.4.x command reference guide 
for more information. 

• Fabric Watch 

• Functionality equivalent to the Open E Port feature of Fabric OS. The Open E Port feature permits 
Fabric OS to support certain Fibre Channel E_Port extension devices. 

In addition, the following differences exist between Fabric OS and XPath OS: 

• XPath OS allows longer connections than the native 1 0 km distance specified by the Fibre Channel 
standard. Long-distance connections are configured using the portCf gLongDistance command. 
For details, see "Configuring a long-distance connection" on page 22. 

• XPath OS does not maintain an alias server, but the FC-FC routing service makes use of aliases 
managed by attached Fabric OS fabrics. 

• XPath OS requires that ports be disabled before changing their properties. Ports are disabled by 
default. If ports have been enabled, actions that return a port to default settings— such as the 
conf igDef ault and portCf gDef ault commands— disable the port. Before configuring an 
enabled port for multi-protocol routing services, the port must be stopped. See the portDisable and 
portStop commands in the HP StorageWorks XPath OS 7.4.x command reference guide for more 
information. 

Daemon overseer service 

Many of the applications running on the MP Router are controlled by daemons. An overseer daemon 
monitors the status of the system daemons. 

1^ NOTE: The Full Fabric License, which is shipped as standard with the MP Router, is required to bring up 
the daemons. 



This overseer daemon checks the heartbeat of all the daemons running in the MP Router. If the overseer 
fails to receive three consecutive heartbeats, it then informs all the daemons who are interested in the 
failure notification. 

Once it receives a response from the appropriate daemon, it takes the action specified: either rebooting 
the switch or restarting the daemon. 

If the notified daemon does not respond within 30 seconds, the overseer then initiates the default action 
shown. 

The overseer daemon monitors the daemons listed in Table 3. 
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Table 3 Monitored XPath OS daemons 







Fmli iro 
ruiiui V 


Dpfniilf 


Chassismgr 


Chassis manager: Captures all the management 
functionalities that apply only at the switch level, for 
example psShow, f anStiow, ipAaddrSet, and 
chassisShow. 


Base 


Reboot 


Chassispd 


Chassis performance daemon: Periodically monitors 
certain chassis elements and stores the information 
in shared memory. 


Base 


Reboot 


Cpmgr 


Manages and controls card and port attributes, and 
validates those attributes coming from the CLI and 
the Objmgr. Sends and receives messages from 

lomctlr. 


Base 


Reboot 


Diagd 


Diagnostic daemon: Typically indicates hardv\/are 
failure. 


Base 


Reboot 


Evtmgr 


Event manager: Collects all events generated by 
other management tasks. 


Base 


Reboot 


Fabctl 


Fabric controller: Determines E_Ports, assigns 
unigue domain IDs, creates a spanning tree, 
throttles the trunking process, and distributes 
domain and aliases lists to all sv/itches in the fabric. 


Port 


Reboot 


Fcipd 


FCIP daemon: Tunnels Fibre Channel frames over 
on IP network. 


Port 


Reboot 


lomctlr 


I/O management controller: Responsible for 
downloading specific firmware onto the port, 
depending on the porttype. Manages and controls 
the card and port attributes, and sends and receives 
messages to cmpgr and to the port agent. 


Base 


Reboot 


Iswitchd 


Iswitch daemon: Provides Fibre Channel routing 
functionality. Routing license is required. 


Port 


Reboot 


Licensed 


License daemon: Manages licensing information on 
the switch. 


Base 


Reboot 


Msd 


Management server daemon: Used with 
management of a switch using API/SMI Interface. 


Base 


Reboot 


Nsd 


Name server daemon: Provides the discovery of 
devices attached to the SAN based on Fibre 
channel protocol - FC GS-3. 


Base 


Reboot 


Objmgr 


Object manager: Manages access to the database 
residing in the flash memory. All commands that 
modify, create, or delete the database go through 
objmgr, which provides the persistence for the 
chassis management system. 


Base 


Reboot 


Rcsd 


Reliable commit service daemon: Provides the 
reliable commit service for replication of data for 
applications like zoning across fabric switches. 


Base 


Reboot 


Rpcd 


Remote procedure call daemon: A management 

Hnpmon <;pr\/pr nrorp<;<; thnt fnri itntp*; API FM nnn 

SMI-Client for execution of procedure calls on 
switches across network. 


Base 


Restart 


Sb 


Facilitates sending and receiving messages between 
the various application tasks and daemons. 


Base 


Reboot 
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Table 3 Monitored XPath OS daemons (continued) 



L/u6nion 


L/escnpiion 


Failurs 


L/GTuUIT 


Snmpd 


Simple Network Management Protocol daemon: 
MANAGEABILITY daemon for monitoring and 
managing a network device/switch. 


Base 


Restart 


Xmld 


XML-rpc daemon: Handles communication with 

VVt^lJ lUUlo wUI t_llt5lll UolllU AIIII lUC. 


Base 


Restart 


Zsd 


Zoning daemon: Provides the services of Fibre 
channel zoning for use with Fabric Zone Merge and 
zoning configurations. 


Base 


Reboot 



availability 

XPath OS 7.4.x includes switch monitoring capabilities; this means that the MP Router monitors all critical 
services. If any of these services fail, the router might reboot in order to preserve data and fabric integrity. 

If you notice repeated reboots, issue the errShow command to determine the reason. 

If the sv/itch is unable to move into the service ready state v^ithin five minutes of rebooting, the MP 
Router changes to the alternate bank and reboots again. The router is nov/ set to disabled, to preserve the 
integrity of the fabric. If the router is still not able to activate using the alternate bank, it reboots into the 
recovery kernel. 

To restore the MP Router to service, establish a telnet connection and issue the appropriate CLI command to 
restore the service. 
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2 Performing basic configuration 



This chapter provides procedures for the basic switch configuration tasks that are frequently performed as 
part of routine SAN administration: 

• Viewing router information, next 

• Verifying the PID mode, page 20 

• Creating interswitch links, page 21 

• Configuring a long-distance connection, page 22 

• Verifying connectivity, page 23 

• Synchronizing time with an NTP server, page 23 

• Licensed features, page 24 

• Changing account passwords, page 24 

• Enabling and disabling switches, page 25 

• Enabling and disabling ports, page 25 

• Activating Ports on Demand: upgrading an 8-port base model to a 16-port full model, page 26 

• Setting the domain ID, page 27 

• Controlling routing within a fabric, page 28 

• Displaying command help, page 31 

Viewing router information 

Use the switchShow command to display detailed information about the MP Router. 
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For example: 



router : adinin> swltchshow 



Switch Name 
Switch State 
Switch Type 
Switch Role 
Switch Domain 
Switch ID 
Switch WWN 
Beacon status 
Zoning 



FabricAP 

Online 

38.0 

Subordinate 
100 

FFFC64 

10 : 00 : 00 : 05 : le: 13 : 84 : 00 

OFF 

ON (lsan_cfgl) 



FC router BB Fabric ID: 



Port Media Speed State 



Info 



0 


id 


AN 


No_Light 






















1 


id 


N2 


Online 


EX_ 


_PORT 


10 : 


00: 


00 : 


60: 


69 : 


cO : 


6d: 


57 


2 


id 


N2 


Online 


EX_ 


_PORT 


10 : 


00: 


00 : 


60 : 


69 : 


90 : 


10: 


98 


3 


id 


N2 


Online 


E_ 


_PORT 


10 


: 00 


: 00 


: 05 


:le 


: 12 


: f8 


:00 


4 


id 


AN 


No_Light 






















5 
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"brcd72" (fabric id = 3 ) 
"brcd73" (fabric id = 4) 
"mars55" (downstream) 



See also "Viewing hardware status" on page 41 . 

rifying the PID mode 

XPath OS uses either core PID mode (the default) or extended-edge PID mode. All switches in a fabric must 
be configured to use the same PID mode. 



1^ NOTE: The PID mode for the MP Router need not match that of the attached fabrics; however, the PID 
mode set on the EX_Port must match. 



Viewing thie PID mode 

1 . Log in as admin. 

2. Issue the conf igShow command. 

3. Verify that the value of following line is either 1 (core PID mode) or 2 (extended-edge PID mode): 

fabric . ops .mode .pidFormat : 1 

Setting the PID mode 



NOTE: To set the PID mode on an EX_Port, see "Configuring an interfabric link" on page 52. To set the 
PID mode of a Fabric OS switch, see the HP StorageWorks Fabric OS 5.x administrator guide. 



Performing basic configuration 



1. Issue the switchDisable command to disable the switch. 

2. Issue the configure command. 

3. Press Enter after the prompts until the Switch pid Address Mode prompt appears. 

4. At the Switch PID Address Mode prompt, enter 1 to enable core PID mode, or enter 2 to enable 
extended-edge PID mode. 

5. Issue the switchEnable command to enable the switch. 

Creating interswitch links 

when you physically connect cables from an MP Router to other MP Routers or to Fabric OS-based 
switches, a fabric forms automatically. See the installation guide for your switch for specific ISL connection 
and cable management information. 

The following conditions must be met on Fabric OS switches: 

• The Platform Services feature must be disabled (this is the default). 

• The switch and ports must be enabled. 

NOTE: To avoid inadvertent fabric merging, MP Router ports should either be disabled or configured as 
EX_Ports before physically connecting ISLs. 



Use the following procedure to disable the Platform Services feature on a Fabric OS switch. For more 
information on the commands, see the HP StorageWorks XPath OS 7.4.x command reference guide. For 
more information on Fabric OS procedures, see the HP StorageWorks Fabric OS 5.x administrator guide. 

Verifying that Platform Services is enabled (Fabric OS or Secure Fabric OS switch only) 

1. On a Fabric OS or Secure Fabric OS switch only, log in to the switch as admin. 

2. Issue the msPlatShow command. 

If the platform is disabled, you need not proceed further. 

If the Platform Services database is populated, the output looks similar to the following: 
switch : admin> msplatshow 

Platform Name: [9] "first ob j " 
Platform Type: 5 : GATEWAY 
Number of Associated M.A. : 1 
[3 5] "http : / / java . sun . com/products /plugin" 
Number of Associated Node Names : 1 
Associated Node Names : 
10:00:00:60:69:20:15:71 



Platform Name: [10] "second obj " 
Platform Type: 7 : HOST_BUS_ADAPTER 
Number of Associated M.A. : 1 
Associated Management Addresses : 
[30 ] "http : / / java . sun. com/products/1" 
Number of Associated Node Names : 1 
Associated Node Names : 
10:00:00:60:69:20:15:75 
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Disabling the Management Server feature (Fabric OS or Secure Fabric OS switch only) 

1. Issue the secModeShow command to see whether the Secure Fabric OS feature is enabled: 

• If it is disabled, go directly to step 3. 

• If it is enabled, log in to the primary FCS switch with secure telnet (sectelnet) or secure shell (SSH), 
and continue with step 2. 

For details on sectelnet and SSH, see the HP StorageWorks Secure Fabric OS user guide. 

2. Issue the secModeDisable command to disable the Secure Fabric OS feature on all switches in the 
fabric; enter y at the prompt to confirm. 

1^ NOTE: The secModeDisable command disables security on all switches in the fabric, deleting both the 
defined and active security databases. 



3. Issue the msplMgmtDeactivate command and enter y when prompted to confirm. 
This command can be used from any switch in the fabric. 

You can confirm fabric connectivity by logging in to the MP Router as admin and issuing the f abricShow 
command to display a summary of all the switches in the fabric: 



router : aditiin> fabricshow 














Switch ID Worldwide Name 








Enet 


IP Addr 


Name 


1 


fffcOl 10 : 00 : 00 : 05 : le 


12 


f8 


00 


10.33 


.52 .55 


"mars55 " 


2 


fffc02 10:00:00:05:le 


16 


If 


12 


10.33 


.52.70 


"mars46 " 


3 


fffc03 10:00:00:60:69 


cO 


6d 


57 


10.33 


.52 .72 


"brcd72 " 


100 


fffc64 10:00:00:05:le 


13 


84 


00 


10.33 


.52 .66 


"FabricAP " 


200 


fffccS 10:00:00:60:69 


90 


10 


98 


10.33 


.52 .73 


"brcd73 " 


The 


Fabric has 5 switches 















Enabling the switch and ports 

Use the switchEnable and portEnable commands. 

iguring a long-distance connection 

Use the portCf gLongDistance command to allocate enough full-size frame buffers on a particular port 
to support a long-distance link. 

Table 4 lists ISL modes. Although the ports configure automatically, for best performance you should 
configure each port connected by the ISL to the same distance level. When the connection is initiated, the 
fabric reconfigures. 



1^ NOTE: If you are creating a long-distance ISL from the MP Router running XPath OS to a switch running 
Fabric OS 4.4.x or 3.2.x, you must set VC translation link initialization to 0 on the Fabric OS switch. VC 
translation link initialization is set to 1 by default in these Fabric OS versions, but it is not supported in 
XPath OS. For details on setting this option to 0, see the HP StorageWorks XPafh OS 7.4.x command 
reference guide for the portCf gLongDistance command. 



Table 4 ISL modes 



Mode 


Description 


Maximum ISL distance 


LO 


Level 0 (the default value for switch ports) 


10 km at 1 Gbit/sec or 2 Gbit/sec 


L0.5 


Level 0.5 


25 km at 1 Gbit/sec or 2 Gbit/sec, 
depending on the number of buffers 
reserved 
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Table 4 ISL modes (continued) 



iVioae 


Description 


Maximum ISL distance 


LE 


Level E 


1 0 km at 1 Gbit/sec or 2 Gbit/sec 


LS 


Level S 


300 km at 1 Gbit/sec or 2 Gbit/sec 



Configuring port 1 5 for the LS distance level 

router : adinin> portdisable 15 

Port 15 disabled, 
router : admin> portcfglongdistance 15 LS 

Distance level is set to LS on port 15. 
router : admin> portenable 15 
Port 15 enabled. 



Verifying connectivity 



Verify fabric-v/ide device connectivity by displaying the fabric-wide device count. The number of devices 
listed in the Name Server reflects the number of devices that are connected. 

1 . Log in as admin. 

2. Issue the switchShow command to verify that local devices are achieving link connectivity. 

3. Issue the nsShow command to display Name Server information and to verify that local devices have 
successfully registered with it, as shown in the following example: 

router : admin> nsshow 
{ 

Type Pid COS PortName NodeName 

N 370000; 2, 3, -10:00:00:00:09:27: 2b :69, -20:00:00:00:09:27: 2b :69 

FC4s: FCP [Initiator] 

NodeSyinb: Emulex LP952 FV3.91A1 DV5-4.82A15 
Fabric Port Name: 20 : 00 : 00 : 05 : le : 16 : If : 04 
NL 370101; 2,3;10:00:00:00:c9:34:06:ac;20:00:00:00:c9:34:06:ac 
FC4s: FCP [Initiator] 

Fabric Port Name: 20 : 01 : 00 : 05 : le : 16 : If : 04 
N 3702 00; 2 , 3 ; 10 : 00 : 00 : 00 : c9 : 34 : 06 : aa; 20 : 00 : 00 : 00 : c9 : 34 : 06 : aa 

FC4s: FCP [Initiator] 

Fabric Port Name: 20 : 02 : 00 : 05 : le : 16 : If : 04 
The Local Name Server lias 3 entries } 

4. Issue the nsAllsliow command to display the 24-bit Fibre Channel addresses of all devices in the 
fabric: 

router : admin> nsallshow 

OdOcel OdfOOl 0df002 0df003 Odf004 0df005 0df006 Odf007 
OdfOOS 0df009 OdfOOa OdfOOb OdfOOc OdfOOd OdfOOe OdfOOf 
Odf 010 

17 Nx_Port devices present in the fabric 



Synchronizing time v/ith an NTP server 



All MP Routers maintain the current date and time in nonvolatile memory for event logging purposes; 
proper switch operation does not depend on the correct date and time. 

Use the following procedure to synchronize the local time of the MP Router to that of an external NTP 
server. To synchronize all MP Routers in a fabric, run this procedure on each. 
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Using an NTP server for time service 

1 . Log in as admin. 

2. Issue the follov/ing command: 

tsclockserver "[ipaddr]" 

The optional ipaddr parameter is the IP address of the NTP server, v/hich must be accessible from the 
MP Router. The default value is locl (local). 

For example: 

router : admin> tsclockserver 

LOCL 

router : adinin> tsclockserver "132.163.135.131" 

router : aditiin> tsclockserver 

132 . 163 . 135 . 131 



1^ NOTE: When an NTP server is configured, the date command cannot be used to set the date and time; 
it can only report the time. 



Licensed features 

The following licenses are included with XPath OS 7.4.x: 

• XPath Advanced Web Tools 

• XPath Advanced Zoning 

• XPath Exchange-Based Trunking 

• XPath Fibre Channel Routing Service 

• XPath Base Switch or Full Fabric 

• XPath FCIP 

• XPath iSCSI 

Removing a license: 

1 . Log in as admin. 

2. Issue the licenseRemove command followed by the license key: 

router : admin> licenseremove bQebzbRdScRf cOiK 

License bQebzbRdScRf cOiK is removed. 

3. When removing some licenses, you must reboot the system to complete the removal. 

Changing account passwords 

Accounts can be assigned either the administrative (admin) role or the user role. You can create a very 
large number of accounts, but because each account consumes system resources, such as file system space 
for home directories, a practical limit is 10 accounts with the admin role and 10 accounts with the user 
role. 

Accounts with the admin role can reset the passwords to default for all accounts with the admin role or user 
role. Accounts with the user role can change the password only for themselves; they cannot change the 
password for other accounts. 

Use the passwd command to change account passwords or the userAdd command to create new 
accounts. The syntax for the passwd command is: 

passwd [-U name] 

The name parameter is the name of the account for which you want to change the password. 
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Without name specified, you are prompted to change the password for the current account. You must enter 
the old password and the new password and then re-enter the new password. The maximum length of a 
password is eight characters. 

If name is specified and the current account has the admin role, the specified account password is reset to 
the default value. 

Changing the admin password (when logged in as adnnin) 

router : admin> passwd 
Old password: 
New password: 
Retype new password: 
The password is changed 



^ NOTE: As a security measure, passwords are not displayed. 



For example, to reset the account userl 23 password to the default value (when logged in as admin): 

router : admin> passwd -u userl23 

Your password: 

The password of userl23 is set to default 

nabling and disabling switches 

When a switch boots, all Fibre Channel ports that pass power-on self test (POST) are enabled. If the switch 
was part of a fabric, it rejoins the fabric. 

Enabling a switch 

1 . Log in as admin. 

2. Issue the switchEnable command: 

router : admin> switchenable 

Switch enabled 

Disabling a switch 

1 . Log in as admin. 

2. Issue the switchDisable command: 

router : admin> switchdlsable 

Switch is being disabled 

Switch disabled 

nabling and disabling ports 

Ports are disabled by default. When a switch is disabled, all Fibre Channel ports on the switch are taken 
offline. If the switch is part of a fabric, the fabric reconfigures. If the port is connected to another switch, the 
fabric might reconfigure. 

When a port is enabled and that port is connected to one or more devices, the devices become available 
to the fabric. 
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Enabling a port 

1 . Log in as admin. 

2. Issue the portEnable command: 

router : admin> portenable 1 

port 1 enabled 

Disabling a port 

1 . Log in as admin. 

2. Issue the portDisable command: 

router : adinin> portdlsable 1 ' ' ' ' ' ' ' ' ' ' ' ' 

port 1 disabled 

If the port is connected to another switch, the fabric might reconfigure. If the port is connected to one or 
more devices, the devices are no longer available to the fabric. 

Activating Ports on Demand: upgrading an 8-port base model to a 
1 6-port full model 

The MP Router is available with either eight ports, 0 through 7 (base model), or sixteen ports, 0 through 1 5 
(full model) activated. If your MP Router shipped with eight active ports, you can activate the remaining 
eight ports by purchasing and installing the HP StorageWorks MP Router Upgrade License. 



1^ NOTE: Check port status to verify whether the license is pre-installed. For example, use the portshow 
command for ports 8 through 1 5. If the port status output indicates Started and Licensed, all 1 6 ports 
are activated. See the HP StorageWorks XPath OS 7.4.x command reference guide for information on the 
portshow command. 



Activating Ports on Demand: 

1. If ports 8 through 15 show no license, purchase the HP StorageWorks HP Router Upgrade License from 
an authorized HP representative. 

Your HP representative requires the MP Router's World Wide Name (WWN) to assign a license key. 

2. Issue the switchshow command to obtain the WWN of your MP Router. 

3. Install the HP StorageWorks MP Router Upgrade License (he license key is a string of approximately 1 6 
uppercase and lowercase letters and numerals): 

a. Log in to the MP Router as admin. 

b. Issue the licenseadd command with the license key enclosed in quotation marks. 

1^ NOTE: Enter the license key exactly as issued. If you enter it incorrectly, the license does not function 
properly. 



c. Issue the licenseshow command to determine whether the license is valid. 
If a licensed product is not displayed, the license is invalid. 



1^ NOTE: After entering a license, the licensed product is available immediately; the system does not require 
a reboot. 



4. Configure the inactive ports. 

For example, if you are using the ports for routing and connecting to an edge fabric, use the 
portcf gexport comamnd to configure the port as an EX_Port. 
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5. Issue the portstart command to start the ports. For example: 

portstart 8-15 

6. Issue the portenable command to enable the ports. For example: 

portenable 8-15 

7. Option: Issue the portshow command to verify that the newly active ports are Started. 

NOTE: If you remove the HP StorageWorks MP Router Upgrade License, ports 8 through 15 no longer 
v/ork after the next reboot. 

Setting the domain ID 

A domain ID is assigned dynamically when a switch is enabled. However, the domain ID can be set 
manually, for example, if you need to control the number to resolve a domain ID conflict when merging 
fabrics. 

Displaying a list of current domain IDs in the fabric 

1 . Log in as admin. 

2. Issue the f abricShow command: 

router : admin> fabricshow 

Switch ID Worldwide Name Enet IP Addr Name 



74 : 


f ffc4a 


10 


00 


00 


60 


69 


50 


09 


la 


192 


168 


. 172 


74 


" mw7 4 " 


75 : 


f ffc4b 


10 


00 


00 


60 


69 


50 


08 


35 


192 


168 


. 172 


75 


"mw7 5" 


100 : 


f f fc64 


10 


00 


00 


05 


le 


13 


8b 


00 


192 


168 


.163 


103 


"apswitch 


103 : 


f ffc67 


10 


00 


00 


05 


le 


13 


83 


00 


192 


168 


.163 


102 


"ap_102" 



The Fabric has 4 switches 

Fabric information is displayed, including the domain ID (listed in the Switch ID column). 

To prevent a domain ID conflict, make sure all domain IDs are unique before connecting an MP Router to 
the fabric. 

Assigning a donnain ID nnanually 

1 . Log in as admin. 

2. Issue the switchDisable command to disable the switch. 

3. Issue the configure command. 

4. Enter a unique domain ID at the domain ID prompt. 

5. Press Enter in response to the remaining prompts. 

6. Issue the switchEnable command to re-enable the switch. 
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For example: 



router : aditiin> switchdlsable 

Switch is being disabled. . 



router : adinin> configure 

Fabric parameter set . <cr> to skip a parameter 

Domain: (1..239 or f ( f abric_assign) ) [100 unconfigured] 5 

BB Credit: [1. .32] [16] 

R_A_TOV: (4000. .120000) [10000] 

E_D_TOV: (1000.. 5000) [2000] 

Data field size: (256.. 2112 multiple of 4) [2112] 
Switch PID Address Mode (1..2) [1] 
WAN_TOV (0 . .R_A_T0V/4 ) [0] 
MAX_HOP_COUNT (7.. 19 ) [7] 

End-device RSCN Transmission Mode (0..2) [1] 
Fabric configuration set 

You must run ' switchenable ' to put the switch bacli to running state 
router : admin> switchenable 



Controlling routing within a fabric 

There are two major aspects of Fibre Channel routing that you can control: 

• Frame delivery order 

• Use of dynamic load-sharing 

Specifying frame delivery order 

In a stable fabric, frames are always delivered in order, even when the traffic between switches is shared 
among multiple paths. However, when topology changes occur in the fabric (for example, if a link goes 
down), traffic is rerouted around the failure, and some frames can be delivered out of order. Most 
destination devices tolerate out-of-order delivery, but some do not. 

By default, out-of-order frame-based delivery is allowed to improve speed. You should force in-order frame 
delivery across topology changes only if the fabric contains destination devices that cannot tolerate 
occasional out-of-order frame delivery. 

Forcing in-order frame delivery across topology chianges 

1. Connect to the switch and log in as admin. 

2. Issue the iodSet command. 

^ NOTE: This command can cause a delay in the establishment of a new path when a topology change 
occurs; it should be used with care. 

Restoring out-of-order frame delivery across topology chianges 

1. Connect to the switch and log in as admin. 

2. Issue the iodReset command. 

Using dynamic load sharing 

Routing is generally based on the incoming port and the destination domain. This means that all the traffic 
coming in from a port (either E Port or Fx Port) directed to the same remote domain is routed through the 
same output E_Port. 

To optimize fabric routing, when there are multiple equivalent paths to a remote switch, traffic is shared 
among all the paths in a process called dynamic load sharing (DLS). DLS is recomputed when a switch is 
booted up or every time a change in the fabric occurs. A change in the fabric is defined as an E_Port 
going up or down or an Fx Port going up or down. 
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DLS is enabled by default. When DLS is enabled, routing changes can affect working ports. For example, 
if an Fx_Port goes down, another Fx_Port might be rerouted from one E Port to a different E_Port. The 
switch minimizes the number of routing changes, but some are necessary to achieve optimal load sharing. 

If DLS is disabled (using the dlsReset command), load-sharing route determination is performed only at 
boot time or when an Fx Port comes up. Optimal load sharing is rarely achieved with DLS disabled. 

Viewing the current DLS setting 

1 . Log in as admin. 

2. Issue the dlsShow command to view the current DLS setting. 
One of the following messages appears: 

• DLS is set. The DLS option is turned on. Load sharing is reconfigured with every change in the 
fabric. 

• DLS is not set . The DLS option is turned off. Load sharing is reconfigured only when the switch 
is rebooted or an Fx_Port comes up. 

Enabling DLS 

1. Log in as admin. 

2. Issue the dlsSet command to enable dynamic load sharing when a fabric change occurs: 

router : adinin> dlsset 
DLS feature enabled 
router : adinin> 

Disabling DLS 

1 . Log in as admin. 

2. Issue the dlsReset command: 

router : adinin> dlsreset 
DLS feature disabled 

Load-sharing path determination is performed only at boot time or when an FX Port comes up. 

Viewing routing information 

You can view routing path information for the fabric, and you can view routing information through a port 
to a destination domain (called unicast routing). 

Viewing routing path infornnation 
1 . Log in as admin. 
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2. Issue the topologyShow command: 



router 


admin> 


topologyshow 




8 domains in the fabric 


Local 


Domain ID: 100 


Domain 


Metric 


Hops 


Out Port Name 


1 


500 


1 


9 


" switchl54 " 


2 


1250 


2 


5 
8 


" switchlOl " 


3 


500 


1 


5 
8 


" switch2 52 " 


4 


1250 


2 


5 
8 


" switchl65 " 


25 


1250 


2 


5 
8 


"msit_ref _term" 


210 


2750 


4 


5 
8 


" switch210" 


211 


2250 


3 


5 
8 


" switch2 11 " 


router 


ac3min> 









The following information is displayed: 

• Domain: The destination domain of incoming frame. 

• Metric: The cost of reaching destination domain. 

• Hops: The maximum number of hops to reach destination domain. 

• Out Port: The available ports to which the incoming frame may be forwarded to reach the 
destination domain. 

• Name: The switch name associated with the destination domain ID. 
Viewing unicast routing information 

1 . Log in as admin. 

2. Issue the urouteShow command: 

router : admin> urouteshow 



Local Domain ID: 


100 










In-Port Domain 


Out-Port 


Metric 


Hops 


Flags 


Next (Dom, Port 


0 74 


10 


1500 


2 


D 


103,10 


75 


0 


500 


1 


D 


75, 0 


103 


10 


1000 


1 


D 


103,10 


10 74 


10 


1500 


2 


D 


103,10 


75 


0 


500 


1 


D 


75, 0 


103 


10 


1000 


1 


D 


103,10 



The unicast routing information describes how a frame received from a port on the local switch is routed 
to reach a destination switch. The following information is displayed: 

• Local Domain ID: The domain number of the local switch. 

• In-Port: The port from which a frame comes in. 

• Domain: The destination domain of the incoming frame. 

• Out-Port: The port to which an incoming frame is forwarded to reach the destination domain. 

• Metric: The cost of reaching the destination domain. 

• Hops: The maximum number of hops required to reach the destination domain. 

• Flags: Whether this route is dynamic (D) or static (S). A dynamic route is discovered by the FSPF 
path-selection routing task. A static route is assigned using the urouteConf ig command. 
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• Next (Dom, Port): Domain and port number of the next hop. These are the domain number and the 
port number of the switch to which Out-Port is connected. 

aying command help 

XPath OS provides a help page for each command, explaining what the command does, its syntax, any 
operands, and the account role required to run the command. 

Displaying help information about a command 

1 . Log in as admin. 

2. Issue the help command: 

help [conmandname] 

where commandname is the name of the command for which you would like help. 

If you enter the help command with no argument, command summaries are displayed in alphabetical 
order. 
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3 Performing basic maintenance 



This chapter provides procedures for installing software, maintaining configuration files, and checking 
hardware status. This information is provided in the following sections: 

• Maintaining the router configuration, next 

• Maintaining firmware, page 35 

• Performing hardware checks, page 41 

Maintaining the router configuration 

it is important that fabric configuration settings be consistent across the fabric, because inconsistent 
parameters can cause fabric segmentation. You should keep a backup file of the router configuration so 
that if settings are lost or unintentional changes are made, you can restore the configuration. 

You can display configuration settings, back up configurations to a host computer, and restore 
configurations using the XPath OS commands shown in the following procedures, or you can use 
Advanced Web Tools, as described in the HP StorageWorks XPath OS 7.4.x Advanced Web Tools 
administrator guide. 

Print a copy of important configuration data, including password information, and store it in a secure 
location. In the event of loss of both configuration information backup file and backup copies, you can use 
this data to start rebuilding the configuration. 



Displaying configuration settings 




1 . Log in as admin. 




2. Issue the conf igShow command 




router : admin> configshow 




fabric . ops . domain : 


100 (unconfigured default) 


fabric . ops . BBCredit : 


16 


fabric . ops . R_A_TOV : 


10000 


fabric . ops . E_D_TOV : 


2000 


fabric . ops . dataFieldSize : 


2112 


fabric . ops .mode .pidFormat : 


1 


fabric . ops . WAN_TOV : 


0 


fabric . ops . MAX_HOP_COUNT : 


7 


switch . rscn_mode : 


1 


Static route: In-Port 


Domain Out-Port 


route . ucastRoute . Count : 0 





The configuration parameters for your router might vary from those shown in the example. 
Backing up a configuration 

1. Verify that the FTP service is running on the host computer and that you have an account on that host. 

2. Log in as admin. 
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3. Issue the conf igUpload command: 

configupload -h hostName -f destFileName -u userName -p password 
[-t fileTransferProtocol] [-1 configuration] 

where: 

-h hostName Specifies the IP address of the FTP server. 

-f destFileName Specifies the destination file name. 

-u userName Specifies the account name on the FTP server. 

-p password Specifies the password for the account. 

-t fileTransferProtocol Specifies the file transfer protocol. 

-1 configuration Displays the current upload configuration. 

The following example uploads a configuration to file misc/conf ig2 . txt located on the host at IP 
address 10.7.32.168, using account JohnDoe and password guest: 

router : ac3inin> configupload -h 10.7.32.168 -f misc/conf ig2 . txt -u JohnDoe -p guest 

Restoring a configuration 

1 . Verify that the FTP service is running on the host workstation and that you have an account on that host. 

2. Log in as admin. 

3. Issue the switchDisable command to disable the switch. 

4. Issue the conf igDownload command: 

conf igdownload -h hostName -f sourceFileName -u userName -p password 
[-t fileTransferProtocol] [-1 configuration] 

where: 

-h hostName Specifies the IP address of the FTP server. 

-f sourceFileName Specifies the full path name of a previously 

stored configuration file. 

-u userName Specifies the account name on the FTP server. 

-p password Specifies the password for the account. 

-t fileTransferProtocol Specifies the file transfer protocol. 

-1 configuration Displays the current download configuration. 

5. Issue the reboot command to reboot the MP Router. 

The following example downloads a configuration file stored at misc/conf ig2 . txt on the host at IP 
address 10.7.32.168, using account JohnDoe and password guest: 

router : adinin> conf igdownload -h 10.7.32.158 -f misc/conf ig2 . txt -u JohnDoe -p 
guest 

Printing configuration information 

1 . Log in as admin. 

2. Enable your telnet logging functionality to create a log file and execute the following commands, or 
execute the commands and paste their output to a text file: 

• licenseShow displays the license keys that are installed. 

• conf igShow displays configuration parameter and setup information, including the port settings. 

• ipAddrShow displays the configured IP addresses. 

3. Print a copy of the output and store it in a safe location. 



Performing basic maintenance 



§*■ NOTE: Depending on your site security procedures, you might want to keep a record of the accounts 
and passwords for all switches in the fabric. Because this is sensitive information, you should limit access 
to it. 



Maintaining firmware 

For the latest Multi-protocol Router firmware updates, visit the MP Router web site: 
http:/ /hi 8006. www 1 .hp.com/ products/storageworks/ mprouter/index.html . 



NOTE: Always back up your configuration as described in "Backing up a configuration" on page 33 
before making any firmware changes. 



With the release of XPath OS 7.4.x, flash memory in the switch is divided into banks. Conceptually, one 
bank is the active bank and the other is inactive. Software (firmware) is always installed to the inactive 
bank. After all packages are installed to the inactive bank, the switch may be booted to activate the newly 
installed software. 

Several command line interface tools were modified or added to support the dual-bank feature. First, 
firmware download always installs software packages to the inactive bank and, as an option, boots to the 
previously inactive bank. 

Added commands include f irmwareShow, which shows the installed software packages in both the 
inactive and active banks, altBoot, which boots to the inactive bank regardless of the last installation, 
and f irmwareCommit, which commits (copies) the active bank to the inactive bank. For details about 
these commands, see the HP StorageWorks XPath OS 7.4.x command reference guide. 

You can maintain two different versions of the XPath OS firmware on the MP Router (one in each bank) by 
disabling autocommit (using the -n flag) during the firmware download. 

If you keep two different versions of firmware on the MP Router, make sure that you verify compatibility 
when installing optional and third-party components. These must be compatible with the firmware version 
stored in the inactive partition. 

You can upgrade the firmware without affecting licensed features. See the release notes for the latest 
information on software and licensed-feature compatibility. 

Upgrading firmware can provide the necessary software for two distinct personalities on the MP Router. 
These personalities are activated according to the type of licensing you activate. See "Licensed features" 
on page 24 for a discussion of these personalities. 

Updating firmware does not change license keys, but new firmware might have new license requirements; 
for example, the new firmware might include a new feature that requires a new license. Check for changed 
license requirements when you update firmware. 

The firmware is delivered in a compressed file called a package. 

Make note of these important guidelines: 

• Back up the configuration before beginning. See "Backing up a configuration" on page 33. 

• Logs and core files are deleted during the firmware download. If you want to save these files, remove 
them from the router before beginning. 

• Perform only one installation step at a time and use only one telnet session. 

• As an alternative, using a serial console to connect during upgrade avoids the disruption that occurs 
during a telnet session. 

• Maintain a separate directory for each version of firmware. Storing multiple packages in the same 
directory can result in the installation of a different version of the firmware than you intended. 

You can also use Advanced Web Tools to install firmware. See the HP StorageWorks XPath OS 7.4.x 
Advanced Web Tools administrator guide for the procedure. 
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Displaying the installed version 

Issue the version command to display information about the firmware version that is currently installed: 



router : adinin> version 
Installed Packages: 

Package Name: xpath_os_v7 . 4 . 0_bldl7 
Install Date: Apr 14, 2005 18:48 

router : adinin> 



Installing a package 



A CAUTION: Whenever you install a base version of the firmv/are, any previously installed add-on 
packages, such as third-party applications, need to be reinstalled. 

In preparation for an upgrade to XPath OS 7.4.0, make sure that the current installation is version 7.3.x. 
The upgrade procedure for previous versions is described at the end of this section. 

Upgrading from XPath OS 73.x to XPath OS 74.0 

1. Verify that the FTP service is running on the host and the you have an account on that host. 

2. Dov/nload the package from the HP MP Router v/eb site 

http://h1 8006. wwwl .hp.com/ products/storageworks/ mprouter/index.html to your host. 

This is a compressed file v/ith a name similar to XPath_0S_v7 . 4 . tar. It contains all of the files 
required to perform the upgrade. 

3. Unzip the package to your FTP directory. 

4. Log in to the MP Router (using the serial console) as admin. 

5. Use the f irmwareDownload command to install the package from the host to the MP Router: 

f irmwaredownload hostlPAddr userName pfile password 

where: 

hostlPAddr Specifies the IP address of the FTP server v^here the package is stored. 

userName Specifies your user account name on the FTP server. 

pfile Specifies the package file name. Specify a fully-qualified path and file 

name for the firmv^are package list, for example, 
/xpath_os_v7.4.x/xpath_rk_vl .5.x. Absolute path names can be 
specified using forv/ard slashes (/). 

password Specifies the passv/ord for the user account. 

The download process takes 10 to 12 minutes. The system does not allow you to enter any commands 
until the download is finished. 

The following is an example of a command to upgrade from XPath OS 7.3.x to 7.4.x: 

switch : admin> f irmwaredownload 10.32.2.25 releaseuser / tmp/xpath_rk_vl . 5 . 2 password 

6. Reboot the MP Router. 

NOTE: By default, when the MP Router is rebooted after an upgrade (by omitting the -n parameter) the 
software is synchronized between any partitions on the MP Router. If you doe not want the software 
synchronized, use the -n parameter to disable autocommit. 
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To upgrade from XPath 7.4.x to 7.4. y 

Two kinds of software updates are supported for XPath 7.4.0. These include updating the XPath base only 
and updating the recovery kernel and the base at the same time. These methods both use the 
f irmwaredownload command, similar to the upgrade procedure from XPath OS 7.3.x to 7.4.0. Use the 
following procedure: 

1. Log in to the MP Router as admin. 

2. Use the f irmwaredownload command to install the package from the host to the MP Router. 

• To update the base only, specify the xpath_os_v 7.4.x file. 

• To update the base and recovery kernel, specify the rkb file. 

The following examples show how the command might be issued when upgrading from XPath OS 7.4.x 
to 74.y. 

Upgrading the XPath base only: 

switch : admin> f irmwaredownload 10.32.2.25 releaseuser /tmp/xpath_os_v7 . 4 .x 
password 

Upgrading the XPath base and recovery kernel: 

switch : admin> f irmwaredownload 10.32.2.25 releaseuser /tmp/xpath_rkb_l . 5 . 2 password 

You can also use Advanced Web Tools to perform updates. See the XPafh OS 7.4.x Advanced Web 
Tools administrator guide for details. 

Upgrading to XPath OS 7.3.0 from a previous version 

Because the XPath OS 7.3.0 package included a new recovery kernel (vl .4.0), upgrading from earlier 
versions requires a special procedure. After you upgrade to XPath OS 7.3.0 using the special procedure, 
you can use the normal procedure to upgrade to subsequent releases. 

Before you begin, back up your configuration as described in "Backing up a configuration" on page 33. 

If the MP Router is running XPath OS 7.1 .x or 7.2.x, the following procedure should be used to properly 
upgrade to XPath OS 7.3.0. With this new procedure, any existing configuration on the MP Router (for 
example, EX_Port and other port definitions, zoning, and licensing) is retained throughout the installation. 
However, you must manually transfer from the MP Router before installing any core files or log files that you 
want to keep. 

A server running an FTP service that is standards-compliant is required to perform the procedure. FTP 
services that come bundled with major operating systems are good candidates. Third-party or shareware 
programs might not function properly. 

The following items are optional: 

• Access to the platform through its serial port, using the supplied serial cable and a terminal emulator. 
This is necessary if you want to follow the progress of the installation process. 

• A serial console connection, if you are using the serial console to perform this procedure. 

Place the following three files, which come with the XPath OS 7.3.0 release, in the same directory on the 
FTP server. In general, it is advisable to keep each XPath OS release in its own directory. 

• install-os . rash 

• xpath_rk_l .4.x 

• xpath_os_v7 .3.x 

Installing XPath OS 7.3.0 

1. Using telnet, log in to the Multiprotocol Router as admin. 

2. Log into the switch and determine the version of XPath that is currently installed. 

At the prompt, issue the version command. If the currently installed version is 7.3.x, you will see 
something similar to the following: 
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# version 

RPG file server : 192.168 
Root directory : /dump/74 
FTP username : root 
FTP password : ****** 
Download protocol : ftp 



Installed Packages: 



Package Name : xpath_os_v7 . 3 . Oc 
Installed from : bankl 
Installed date : Sep 8 15:39 
Administrative status : (1) 
Primary status : up 

Secondary status : installed and running 

Disk usage on root fs - Total: 198 Mbytes, Free: 99 Mbytes. 

3. Using the f irmwareDownload command, point to the xpath_rk... file by entering the following 
command. Using the above file example, if it was placed in /tmp on the FTP server with IP address 
10.20.30.40 and login name "user" and password "pass", then the command is: 

admin> f Irmwaredownload 10.20.30.40 user /tmp/xpath_rk_l . 4 . 1 pass 

You can also use Advanced Web Tools to perform this installation by pointing to the same file. 

4. During the above process the telnet session is lost, because this installation process automatically 
reboots the MP Router several times. During this time, a new recovery kernel is installed, as well as the 
corresponding Base image. With the example files above, at the end of the installation process, the MP 
Router will have recovery kernel vl .4.1 installed along with XPath OS 7.3.0. 

5. The entire process takes approximately 25 minutes to complete. If you want to follow the progress of the 
installation, connect to the serial port if it is available. 

The Multiprotocol Router will now be running XPath OS 7.3.0. 



^ NOTE: You can use a one-step upgrade from XPath OS 7.3.0 to 7.4.0 by using the 

f irmwareDownload command. 



Place the following files, included with the XPath release, in the same directory on the FTP server. Keep 
each XPath release in its own directory. 

For XPath OS 7.3.0, the recovery kernel version is 1 .4.1 . For XPath OS 7.4.0, the recovery kernel version is 
1.5.2. 

• install-os.osu 

• xpath_rk_1.4.1 (or 1.5.2) 

• xpath_os_v7.3.0 (or v7.4.0) 

In addition, for 7.4.x 

• -xpath_rkb_1.5.2 

During this process, the telnet session is lost because the installation process automatically reboots the MP 
Router several times. During this time, a new recovery kernel is installed, as well as the corresponding base 
image. 

The entire process takes approximately 25 minutes to complete. To follow the progress of the installation, 
connect to the serial port, if it is available. 
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Downgrading from XPath OS 7.3.0 or later to a previous version 

This section describes how to downgrade to an earlier release of XPath OS. If the MP Router is running 
XPath OS 7.3.0 or later and you want to downgrade to release 7.2.x or earlier, follow these steps. 

Before you begin, make sure that you have the following required items | : 

• Access to the platform through its serial port, using a serial cable and a terminal emulator. 

• The correct recovery kernel version: 

• 1.4.1.3 for XPath OS 73.x 

• 1.3.0.2 for XPath OS 72.x 

• 1.3.0.0 for XPath OS 71.x. 

• An FTP server that the platform can access (for loading the firmware) 

• If you are required to replace the recovery kernel, a TFTP server that the platform can access (the TFTP 
service can be on the same server as the FTP service) 

Downgrading to XPath OS 7.3.0 

1 . Determine the version of the recovery kernel that is currently installed, log in to the switch and enter the 
following command: 

admin> showrecovery 

2. Downgrade the recovery kernel. 

This is required when installing an earlier XPath OS release. 

A CAUTION: Downgrading the recovery kernel erases all zoning and other fabric-configuration parameters. 
To preserve the configuration data, perform a conf igUpload procedure before upgrading the kernel; 
perform a conf igDownload procedure afterward, to restore the configuration data. 



a. Connect to the switch through the serial console. 

b. Reboot the switch. 

c. Enter the boot loader (PMON) by pressing any key except Enter when prompted during the 
countdown sequence. 

d. Using a TFTP server only (an FTP server will not work), enter the following commands: 



Multiprotocol 


Router> 


set 


Ipaddr ipaddr-of-this-switch 


Multiprotocol 


Router> 


set 


netmask netmask-of- this -switch 


Multiprotocol 


Router> 


set 


gateway gateway-of-this-switch 


Multiprotocol 


Router> 


reboot (so that tlie new IP addresses can take effect) 



e. Repeat step 2c after the boot and then go to step 2f. 

f. Enter the commands shown in the following example. For the set bankOver command, use the 
correct recovery kernel version: 

• 1.4.1.3 for XPath OS 73.x 

• 1.3.0.2 for XPath OS 72.x 

• 1.3.0.0 for XPath OS 71.x. 
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The following example shows a recovery to XPath OS 7.1 .x using the recovery kernel version 
1.3.0.0. 



Multipirotocol 


Routsr > 


S6t 


cunrentdnldproto t£tp 


Multiprotocol 


Router> 


set 


boot server ipaddr-of-the - 1 f tp - server 


Multiprotocol 


Router> 


set 


basefile XPathRecoverAP7420 


Multiprotocol 


Router> 


set 


cfgbank bankO 


Multiprotocol 


Router> 


set 


rootdir / 


Multiprotocol 


Router> 


set 


bankOver 1.3.0.0 


Multiprotocol 


Router> 


netload -p Oxdeeddeed; g 



1^ NOTE: The value of / is relative to the /tftpboot directory on most UNIX systems running the TFTP 
service; therefore, a value of / implies the /tftpboot directory, while a value of /rk implies the 
/tftpboot/rk directory. 



After following these steps, the switch reboots and displays the recovery kernel prompt. 
3. Use the recovery kernel to download the firmware. 



A CAUTION: Using the recovery kernel to download the firmware permanently removes all zoning and 
other fabric-configuration parameters. To preserve the configuration data, perform a conf igUpload 
procedure before updating the firmware; perform a conf igDownload procedure afterward, to restore 
the configuration data. 



a. Connect to the switch through the serial console. 

b. Reboot the switch. 

c. When prompted during the countdown sequence, enter the boot loader (PMON) by pressing any 
key except Enter. 

d. Enter the following commands: 

Multiprotocol Router> set cfgbank bankO 

Multiprotocol Router> reboot 

e. After the reboot, download the XPath OS firmware package. In the following example, 
xpath_os_v7 . 3 . 0 is installed. You must use an FTP server; a TFTP server will not work due of the 



size of the 


download 






Recovery 


Kernel% 


format all (Answer y to proceed. This will take 1-2 min. ) 


Recovery 


Kernel% 


set 


basefile xpath_os 


Recovery 


Kernel% 


set 


rootdir <ftp dir. path to XPathOS image> 


Recovery 


Kernel% 


set 


currentdnldproto ftp 


Recovery 


Kernel% 


set 


boot server <ipaddr-of-the-ftp-server> 


Recovery 


Kernel% 


set 


ftpusername <userid> (Your FTP server's user 


account . ) 






Recovery 


Kernel% 


set 


ftppassword <password> (Password for the specified 


user . ) 








Recovery 


Kernel% 


set 


banklver 7.3.0 (. This will take 1-2 mins . ) 


Recovery 


Kernel% 


set 


cfgbank bankl (This will take about 8 


min . ) 


Recovery 


Kernel % reboot 



After the reboot, the platform starts up and XPath OS 7.3.0 is loaded. 
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Performing hardware checks 

You can view hardware status and modify the power supply status threshold. 

Viewing hardware status 

Three components determine the overall status of the hardware: 

• Fan speed 

• Power supply 

• Temperature 

If the status of any component is marginal, overall status is Marginal. Likewise, if the status of any of the 
components is down, the overall status is Down. In all other cases, overall status is Healthy. 

Individual rules determine the status of each component. You cannot change these rules from the CLI, but 
you can edit them manually in the configuration file. 

Table 5 lists the default rules of component status. 



Table 5 Component status rules 



Component type 


Number failed 


Status 


Fan speed 


1 


Marginal 




>1 


Down 


Power supply 


1 


Down 


Temperature 


2 


Marginal 




>2 


Down 



Viewing hardware status 

1 . Log in as admin. 

2. Issue the switchStatusShow command: 

router : admin> switchstatusshow 

Switch overall status: Healthy 
Reason: 

All components are in healthy status 
Power overall status: Healthy 
Fan overall status: Healthy 
Temp overall status: Healthy 

Viewing port status 

1 . Log in as admin. 

2. Issue the portShow command, specifying the number of the port for which you want to see status. 
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This command displays operational status and traffic statistics, for example: 





portshow 1.2 




port 


12 info 






Configuration 


Current 


Name : 


port 12 




State : 


STARTED 


UP 


Tvne 


FC 


FC 


Link Status : 


ENABLED 


UP 


Topology: 


P-P 


P-P 


Speed: 


AN 


N2 


LinkCost : 


AUTO 


500 


Distance : 


LO . 5 (LM) 


LO . 5 (LM) 


WWN: 


20:0c:00:05:le 


12 : f 8 : 00 


Licensed 


: YES 




Diag" result 


: PASSED 




inFrames : 


188 




outFrames : 


188 




inOctets : 


11408 




outOctets : 


8368 




discards : 


0 





Viewing fan status 

1 . Log in as admin. 

2. Issue the fanShow command: 

router : aditiin> f anshow 



Fan 

RPM 


1 


Status : 


OK 


Set_ 


_Speed: 


NORMAL 


Actual, 


,speed: 


7010 


Fan 

RPM 


2 


Status : 


OK 


Set_ 


_Speed: 


NORMAL 


Actual, 


,speed: 


7180 


Fan 

RPM 


3 


Status : 


OK 


Set_ 


_Speed: 


NORMAL 


Actual, 


,speed: 


7068 


Fan 

RPM 


4 


Status : 


OK 


Set_ 


_Speed: 


NORMAL 


Actual, 


,speed: 


7116 


Fan 

RPM 


5 


Status : 


OK 


Set_ 


_Speed: 


NORMAL 


Actual, 


,speed: 


7155 


Fan 


6 


Status : 


OK 


Set_ 


_Speed: 


NORMAL 


Actual, 


,speed: 


7001 



RPM 

The possible values for fan status are: 

• OK: Fan is present and functioning correctly. 

• NOT PRESENT: Fan is not present. 

• FAIL: Fan is present, but faulty. 

1^ NOTE: The number of fans and valid range for RPMs varies, depending on the type of sv/itch. For more 
information, see the installation guide for your sv/itch. 
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Viewing temperature status 

Use the tempShow command to display readings of all temperature sensors in the MP Router: 

1 . Log in as admin. 

2. Issue the tempShow command: 



router : 
Index 


: adinin> tempshow 
Status 


Centigrade 


Fahrenheit 


1 


OK 


21 


70 


2 


OK 


22 


72 


3 


OK 


29 


84 


4 


OK 


24 


75 


5 


OK 


25 


77 



The possible values for temperature status are: 

• OK: Temperature is within the acceptable range. 

• MARGINAL: Temperature is outside the acceptable range. Damage might occur to the switch. 

The number of sensors might vary on different MP Routers. Every sensor is indexed by a sequential number. 

For more information on the location of the sensors and the range of temperatures for safe operation, see 
the installation guide for your switch. 

Viewing power supply status 

1 . Log in as admin. 

2. Issue the psShow command: 



router : admin> psshow 




















POWER SUPPLY 1 Serial no; 


: 0000101 


Part no : 


: 60 


-0000754- 


01 


Rev: 


A 


Status : 


OK 


POWER SUPPLY 2 Serial no: 


:0000096 


Part no ; 


; 60 


-0000754- 


01 


Rev: 


A 


Status : 


OK 



The possible values for power supply status are: 

• OK: Power supply is present and functioning correctly. 

• NOT PRESENT: Power supply is not present. 

• FAIL: Power supply is present, but faulty. 

A power supply identification line might be shown. If present, this line contains the serial number and 
other identification information. 

Modifying the power supply status threshold 

By default, a switch running on a single power supply is in a marginal status. In some cases, this is a valid 
configuration and you can modify the power supply status threshold to reflect this: 

1 . Log in as admin. 

2. Issue the conf igUpload command to back up the current configuration. 
See "Backing up a configuration" on page 33. 

3. Open the configuration file in a text editor and find the following line: 

switch. status .policy. PowerSupplies .marginal : 1 

Change the 1 to 0, as follows: 

switch. status .policy. PowerSupplies .marginal : 0 

4. Issue the conf igDownload command to download the modified configuration to the switch. See 
"Restoring a configuration" on page 34. 

5. Reboot the MP Router. 
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4 Using the FC-FC Routing Service 



The FC-FC Routing Service is an optional, fee-based license that provides Fibre Channel routing betv/een 
two or more fabrics v^ithout merging those fabrics. 

The MP Router can be used simultaneously as a Fibre Channel router and as an FCIP tunnel. 
This contains the follov/ing sections: 

• About Fibre Channel routing, next 

• Configuring an interfabric link, page 52 

• XPath OS and Secure Fabric OS, page 54 

• Setting a proxy PID, page 57 

• Monitoring resources, page 58 

• Routing ECHO, page 58 

• Connecting to McDATA SANs, page 59 

• Configuring the fabrics for interconnectivity, page 61 

• LSAN zoning, page 67 

About Fibre Channel routing 

FC-FC routing introduces the follov/ing concepts (see Figure 3, Figure 4 on page 46, and Figure 5 on 
page 47): 

• You can create logical storage area netv/orks (LSANs) that can span fabrics. These LSANs allov^ Fibre 
Channel zones to cross physical SAN boundaries v/ithout merging the fabrics and v/hile maintaining 
the access controls of zones. (See Figure 3.) 

• A special type of port, called an EX Port, functions somev^hat like an E Port but terminates at the router 
and does not propagate fabric services or routing topology information from one edge fabric to 
another. The link between an E Port and an EX Port is called an interfabric link (IFL). You can configure 
multiple IFLs from one MP Router, from additional MP Routers, or from both. (See Figure 4 on page 46.) 

• One property of every EX Port is its fabric ID (FID). Multiple EX Ports attached to the same fabric have 
the same FID. EX Ports attached to different fabrics have different FIDs. 

• A standard Fibre Channel SAN with Fibre Channel targets and initiators connected through an MP 
Router to another Fibre Channel SAN is called an edge SAN. 

• The edge SAN fabric is called an edge fabric. 

• MP Routers can also connect edge fabrics using a backbone fabric— similar to a TCP/IP backbone 
network. A backbone fabric consists of at least one MP Router, and possibly a number of Fabric 
OS-based Fibre Channel switches. It provides transport but is otherwise transparent to the hosts, targets, 
and LSANs. A fabric cannot be both a backbone fabric and an edge fabric. (See Figure 5 on 

page 47.) 

• The term meta-SAN is used for the collection of all SANs interconnected with Fibre Channel routers. 
Simple meta-SANs can be constructed using a single MP Router. Additional MP Routers and router 
ports can be used to increase the available bandwidth between fabrics and for redundancy. 

Figure 3 shows a simple meta-SAN consisting of one MP Router connecting hosts in Edge Fabric 1 and 
Edge Fabric 3 with storage in Edge Fabric 2 through the use of LSANs. 
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Figure 3 Simple meta-SAN 

Figure 4 shows a meta-SAN consisting of two edge fabrics connected through an MP Router with 
interfabric links. 




Figure 4 Meta-SAN with interfabric links 

Figure 5 shows another meta-SAN consisting of a host in Edge SAN 1 connecting to storage in Edge SAN 
2 through a backbone fabric connecting two MP Routers. 
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Figure 5 Edge SANs connected through a backbone fabric 

Proxy devices 

In an isolated SAN, the physical topology of the interconnections between nodes and switches is closely 
modeled by the logical topology of the connections between PIDs; this is not so in a meta-SAN. With an 
MP Router in a meta-SAN, a node is projected into the logical topology as a proxy device. This is a proxy 
topology. 

An MP Router achieves interfabric device connectivity by creating proxy devices (hosts and targets) in 
attached fabrics that represent real devices in other fabrics. For example, a host in Fabric 1 can 
communicate with a target in Fabric 2 as follows: 

• A proxy target in Fabric 1 represents the real target in Fabric 2. 

• Likewise, a proxy host in Fabric 2 represents the real host in Fabric 1 . 

The host discovers and sends Fibre Channel frames to the proxy target. The MP Router receives these 
frames, translates them appropriately, and then delivers them to the destination fabric for delivery to the 
target. 

The target responds by sending frames to the proxy host. Hosts and targets are exported from the edge 
SAN to which they are attached and, correspondingly, imported into the edge SAN reached through Fibre 
Channel routing. 

Figure 6 illustrates this concept. 
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Host ^ Proxy 




Figure 6 Proxy topology 

s and zoning 

An LSAN is defined by a zone in an edge fabric. You can define and manage LSANs using HP Advanced 
Zoning or HP Fabric Manager. 

Zones are locally defined. Names and memberships, with the exception of hosts and targets exported from 
one fabric to another, do not need to be coordinated between the edge fabrics. For example, in Figure 5 
on page 47, when the zones for Edge SAN 1 are defined, you do not need to consider the zones in Edge 
SAN 2, and vice versa. 

The exception is hosts and targets that are shared between the two fabrics. Although an LSAN zone is 
managed using the same tools as any other zone on the edge fabric, two characteristics distinguish an 
LSAN zone from a conventional zone: 

• A required name convention. The name of an LSAN zone begins with lsan_. This is case insensitive; 
for example, lsan_ is equivalent to LSAN_, Lsan_, and so on. 

• Members must be identified by their port WWN, because PIDs are not necessarily unique across 
fabrics. 

Because zoning is enforced by all involved edge fabrics, any communication from one edge fabric to 
another must be allowed by the zoning setup on both edge fabrics. If the SANs are under separate 
administrative control, the separate administrators maintain access control. 

You can perform LSAN zoning for both HP and for McDATA fabrics using HP LSAN zoning. 

The following example procedure illustrates how LSAN zones control the devices that can communicate 
with one another. The example shows the creation of two LSAN zones (called lsan_zone_f abricl and 
lsan_zone_f abric2), which involve the following devices: 

• Switch 1 and the host are in fabric 1 . 

• Switch2 and targets A and B are in fabric2. 

• Switch 1 is connected to the MP Router using an EX_Port. 

• Switch2 is connected to the MP Router using another EX_Port. 

• Host is at WWN 1 0:00:00:00:c9:2b:6a:2c (connected to switchl). 

• Target A is at WWN 22:00:00:20:37:c3: 1 1 :71 (connected to switch2). 

• Target B is at WWN 22:00:00:20:37:c3:l a:8a (connected to switch2). 
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1 . Connect to switch 1 , log in as admin, and create and enable the first LSAN zone: 

a. Use the nsShow command to list the WWN of the host (1 0:00:00:00:c9:2b:6a:2c). 

b. Use the zoneCreate command to create the LSAN zone called lsan_zone_f abricl, which 
includes the host. 

c. Use the zoneAdd command to add Target A to the LSAN zone. 

d. Use the cf gCreate and cfgEnable commands to create and enable the LSAN zone 
configuration. 

switchl : adinin> nsshow 
{ 

Type Pid COS PortName NodeName 

TTL (sec) 

N 030000; 2 , 3 ; 10 : 00 : 00 : 00 : c9 : 2b : 6a : 2c ; 2 0 : 00 : 00 : 00 : c9 : 2b : 6a : 2c ; na 

FC4s: FCP 

NodeSYinb: [34] "Emulex LP952 FV3.81A3 DV5-4.82A4 " 
Fabric Port Name: 20 : 00 : 00 : 60 : 69 : cO : 05 : 89 
The Local Name Server has 1 entry } 

switchl ; admin> zonecreate "lsan_zone_f abricl", "10 : 00 : 00 : 00 : c9 : 2b: 6a : 2c" 
switchl : admin> zoneadd "lsan_zone_f abricl", "22:00:00:20:37:c3:ll:71" 
switchl : admin> cfgcreate "zone_cfg", "lsan_zone_f abricl" 
switchl : admin> cfgenable "zone_cfg" 

Starting the Commit operation... 
cfgEnable successfully completed 

2. Connect to switch2, log in as admin, and create and enable the second LSAN zone: 

a. Use the nsShow command to list Target A (22:00:00:20:37:c3:l 1 :71) and Target B 
(20:00:00:20:37:c3:la:8a). 

b. Use the zoneCreate command to create the LSAN zone called lsan_zone_f abric2, which 
includes the host (1 0:00:00:00:c9:2b:6a:2c), Target A, and Target B. 

c. Use the cf gCreate and cfgEnable commands to create and enable the LSAN zone 
configuration. 

switch2 : admin> nsshow 
{ 

Type Pid COS PortName NodeName TTL (sec) 

NL 6100e8; 3 ;22 : 00 : 00 :20 : 37 :c3 : 11 : 71;20 : 00 : 00 :20 :37 :c3 : 11 :71; na 

FC4s: FCP [SEAGATE ST318304FC 0003] 

Fabric Port Name: 20 : 00 : 00 : 60 : 69 : cO : 21 : 26 
NL 6100ef; 3 ;22 : 00 : 00 :20 : 37 :c3 : la: 8a;20 : 00 : 00 :20 :37 :c3 : la: 8a; na 

FC4s: FCP [SEAGATE ST318304FC 0003] 

Fabric Port Name: 20 : 00 : 00 : 60 : 69 : cO : 21 : 26 

The Local Name Server has 2 entries } 

switch2 : admin> zonecreate "lsan_zone_f abric2", "10 : 00 : 00 : 00 : c9 : 2b: 6a: 2c; 
22:00:00:20:37:c3:ll:71;22:00:00:20:37:c3:la:8a" 

switch2 : admin> cfgcreate "zone_cfg", "lsan_zone_f abric2" 

switch2 : admin> cfgenable "zone_cfg" 

Starting the Commit operation... 
cfgEnable successfully completed 

3. Connect to the MP Router, log in as admin, and use the following commands to display information 
about the LSAN zones: 

a. Use IsanZoneSlnow -s to show the LSAN zones. 

b. Use f crPtiyDevSliow to show the physical devices in the LSAN zones. 

c. Use f crProxyDevSliow to show the proxy devices in the LSAN zones. 
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On the MP Router, the host and Target A are imported, because both are defined by 
lsan_zone_f abricl and lsan_zone_f abric2. However, Target B, which is defined by 
lsan_zone_f abric2, is not imported because lsan_zone_f abricl does not allow Target B to 
be imported. 



router : admin> Isanzoneshow -s 

Fabric ID: 1 Zone Name: lsan_zone_f abricl 
10:00:00:00:c9:2b:6a:2c Exist 
22 : 00 : 00 :20 : 37 :c3 : 11 :71 Imported 

Fabric ID: 2 Zone Name: lsan_zone_f abric2 
10:00:00:00:c9:2b:6a:2c Imported 
22 : 00 : 00 :20 : 37 :c3 : 11 :71 Exist 
22 : 00 : 00 : 20 : 37 : c3 : la: 8a Exist 

router : admin> f crphydevshow 
Device WWN Physical 

Exists PID 

in Fabric 



1 10:00:00:00:c9:2b:6a:2c 030000 

2 22:00:00:20:37:c3:ll:71 6100e8 
2 22:00:00:20:37:c3:la:8a 6100ef 



router : admin> f crproxydevshow 

Proxy WWN 
Created 
in Fabric 



Proxy 
PID 



Device Physical 
Exists PID 
in Fabric 



State 



1 22 : 00 : 00 : 20 : 37 : c3 : 11 : 71 02f001 2 6100e8 Imported 

2 10:00:00:00:c9:2b:6a:2c OlfOOl 1 030000 Imported 

When a PLOGI, PDISC or ADISC arrives at the MP Router, the SID and DID of the frame are checked. If 
they are LSAN-zoned at both SID and DID edge fabrics, the frame is forwarded to the DID. If they are not 
zoned, the unauthorized frames are dropped. 

Fibre Channel NAT and phantom domains 

Within an edge fabric (or across a backbone fabric), the standard Fibre Channel FSPF protocol determines 
how frames are routed from the host or target node through the fabric to the destination node. When 
frames leave the fabric through an MP Router, the frames are routed to an EX_Port. Fibre Channel fabrics 
require that all ports be identified by a unique PID. Within a single fabric, fabric formation guarantees that 
domain IDs are unique, and so a PID formed by a domain ID and area number is unique within a fabric. 
However, the domain IDs and PIDs in one fabric might be duplicated within another fabric, just as IP 
addresses unique to one private network are likely to be duplicated within another private network. 

In an IP network, a network router can maintain network address translation (NAT) tables to replace private 
network addresses with public addresses when a packet is routed out of the private network, and to 
replace public addresses with private addresses when a packet is routed from the public network to the 
private network. The Fibre Channel routing equivalent to this IP network address translation is Fibre 
Channel network address translation (FC-NAT). Using FC-NAT, the proxy devices in a fabric can have 
different PIDs than the real devices that they represent, allowing the proxy devices to have appropriate PIDs 
for the address space of their corresponding fabric. 
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Proxy devices are presented to the fabric as being topologically attached to phantom domains created by 
the FC-FC Routing Service. The MP Router creates tv/o types of phantom domains for each edge fabric 
accessed: 

• Each EX_Port projects a unique front phantom domain ffront domain). 

• Each EX Port also projects one translate phantom domain (xiate domain) for each edge fabric 
accessed through it. All EX Ports connected to an edge fabric use the same xIate domain number for a 
remote edge fabric; this value persists across switch reboots and fabric reconfigurations. Xiate domains 
are presented as being connected topologically behind one or more front domains. This allov/s 
redundant EX_Ports or MP Routers v/ith redundant paths to remote fabrics to present redundant paths to 
proxy devices to an edge fabric. 

Phantom domains are like logical sv/itches that appear to be connected to an edge fabric through the 
EX_Ports. The combination of front domains and xIate domains allows routing around path failures, 
including path failures through the routers. The multiple paths to an xIate domain provide additional 
bandwidth. 

Connecting multiple EX_Ports to an edge fabric 

You can connect multiple EX Ports to the same edge fabric. The EX_Ports can all be on the same MP 
Router, or they can be on multiple routers. Multiple EX Ports create multiple paths for frame routing. 
Multiple paths can be used in two different, but compatible, ways: 

• Failing over from one path to another 

• Using multiple paths in parallel to increase effective data transmission rates 

Routing failover is automatic, but it can result in frames arriving out of order when frames take different 
routes. The MP Router can force in-order delivery, although frame delivery is delayed immediately after the 
path failover. 

You can control whether in-order delivery is required; see "Specifying frame delivery order" on page 28. 

Source EX Ports can balance loads across multiple destination EX Ports attached to the same edge fabric 
using exchange IDs from the routed frames as keys to distribute the traffic. This feature is enabled 
automatically when the exchange-based trunking feature is enabled. See Chapter 8, "Using ISL trunking," 
for details on enabling this feature. 

Matching fabric parameters 

By default, the MP Router detects, autonegotiates, and configures the fabric parameters without user 
intervention. 

As an option, you can configure these parameters manually. Use the configure command on a switch in 
the edge fabric to change the fabric parameters of a switch in the edge fabric. Then use the 
portCf gExPort command to change the fabric parameters of an EX_Port on the MP Router. 

For details see "Supported modes" on page 59. 

Fabric parameter settings must be the same on EX_Ports and on the fabrics to which they are connected: 
E D TOV (error-detect timeout value), R A TOV (resource-allocation timeout value), and PID format. You 
can set the PID format on an EX Port when you configure an interfabric link. 

The default values for E D TOV and R A TOV for an EX Port match those values on HP StorageWorks 
switches. You need to adjust these parameters for an EX Port only if you have adjusted them for the fabric. 

The default values for R_A_TOV and E_D_TOV are the recommended values for all but very large fabrics 
(ones requiring four or more hops) or high-latency fabrics (such as ones using long-distance FCIP links). 

SAN scalability 

Fabrics have scalability limits; for example, the maximum number of Name Server entries allowed limits the 
number of devices that can join a fabric. When you try to merge fabrics, this limit might be exceeded. But 
using Fibre Channel routing, you need not merge the fabrics. Instead, you can selectively import only those 
specific hosts or targets to be shared between the fabrics, and thus use Name Server entries more 
efficiently. 
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For example, suppose the maximum number of Name Server entries is 1 024. Consider Fabric A with 700 
devices and Fabric B v/ith 600 devices. If you try to merge Fabrics A and B, the result requires 1 300 Name 
Server entries, which exceeds the maximum of 1 024. Using Fibre Channel routing, you can perform either 
of the following: 

• Import up to 324 hosts or targets to Fabric A from Fabric B (700 + 324 = 1 024) 

• Import up to 424 hosts to Fabric B from Fabric A (600 + 424 = 1 024). 

Scaling of SANs that comprise multiple vendor fabrics is limited by the native fabric scalability. 

Configuring an interfabric link 

Before you configure an IFL, consider the following rules: 

• Devices, whether Fibre Channel initiators. Fibre Channel targets, or others, connected to an edge fabric 
cannot be in an LSAN with devices attached to a backbone fabric. 

• You cannot configure both IFLs (EX Ports) and ISLs (E_Ports) from one MP Router to the same edge 
fabric. 

Configuring an interfabric link involves stopping ports and cabling them to other fabrics, configuring those 
ports for their intended use, and then starting the ports. The following procedure demonstrates how to 
configure for both edge and backbone connections: 

1. Make sure that the FC-FC Routing Service license is installed. 
See "Licensed features" on page 24. 

2. Issue the portStop command to stop all ports that are to be configured. 

The ports must be stopped to prevent any backbone fabrics from merging with edge fabrics when their 
ports are cabled into a fabric. For example, to stop ports 1 through 3: 

router : admin> portstop 1-3 

port 1 stopped, 
port 2 stopped, 
port 3 stopped. 

3. Cable the ports to the edge and backbone fabrics. 

4. Configure each port that connects to an edge fabric as an EX_Port. 

5. Issue the portCf gExPort command to: 

• Enable the EX Port mode. 

• Set the fabric ID (avoid using fabric ID 1, which is the default for backbone connections). 

• Set the PID format, if necessary. 

• Start routing between HP and McDATA fabrics. 
For example: 

portcfgexport port -a 1 -f fabricID -p pidformat 
where: 

-a Sets the EX_Port to enabled (l) or disabled (2). 

-f Sets the fabric ID (1 to 1 28). Each edge fabric must have a unique ID, and 

EX Ports connected to the same edge fabric must have the same ID. The 
default value is the port number plus 2. 

-m Sets the connectivity mode (0 = Brocade Native, 1 = McDATA Open 

-p Port ID format (1 = core, 2 = extended-edge, and 3 = native). The value 

must match the edge fabric setting. The default value is 1 . 

The fabric ID settings for all EX Ports attached to the same fabric must match. EX Ports attached to more 
than one edge fabric must configure a different fabric ID for each edge fabric. 
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The PID mode for the MP Router (the backbone fabric PID mode) and the edge fabric PID mode do not 
need to match, but the PID mode for the EX port and the edge fabric to which it is attached must 
match. The various edge fabrics may have different PID modes. 

6. Configure each port that connects to a backbone fabric as an E_Port. 

7. Assign the backbone fabric ID: 

a. Issue the switchDisable command to disable the sv/itch. 

b. Issue the f crConf igure command. At the prompt, enter the fabric ID, or press Enter to specify the 
default fabric ID (1 ). Make sure the fabric ID is different from that set for edge fabrics, and avoid 
using fabric IDs 2 through 1 7, v/hich are the defaults for edge fabrics. 

Multiple MP Routers attached to the same backbone fabric must have the same backbone fabric ID. 

c. Issue the switchEnable command to enable the switch. For example: 



router : adinin> swltchdlsable 




Switch is being disabled 




Switch disabled 




router : adinin> fcrconf igure 




FC Router parameter set. <cr> to skip a 


parameter 


Backbone fabric ID: (1-128) [1] 




You must run switchenable to return the 


switch back to online state. 


router : admin> switchenable 




Switch enabled 





8. Establish LSAN zones; see Chapter 7, "Creating and maintaining zones," for details. 

9. Issue the portStart command to start the ports: 

router : admin> portstart 1-3 

port 1 started 
port 2 started 
port 3 started 

10. Issue the portShow command to verify that each port is configured correctly: 

router : admin> portshow 2 

port 2 info 

Configuration Current 

State: ENABLED UP 

Type : FC FC 

Link Status : ENABLED UP 

Topology: LOOP LOOP 

Speed: 10 IG 

LinkCost: 100 0 (STATIC) 

WWN: 20:01:00:05:le:00:30:00 

Licensed : YES 

Diag result : PASSED 

inFrames : 14 
outFrames : 12 
inOctets : 1472 
outOctets : 1168 



XPath OS 7.4.x administrator guide 53 



XPath OS and Secure Fabric OS 



Beginning with XPath OS 7.4.x, the MP Router supports routing between secure fabric employing HP 
Secure Fabric OS with non-secured fabrics through Challenge-Handshake Authentication Protocol 
(DH-CHAP). Secure Fabric OS is an optional, licensed product that provides customizable security 
restrictions through local and remote management channels on an HP StorageWorks fabric. 

Secure Fabric OS uses digital certificates based on PKI or Diffie-Hellman with DH-CHAP shared secrets to 
provide switch-to-switch authentication. 

For details about Secure Fabric OS, see the HP StorageWorks Secure Fabric OS administrator guide. 

To determine that an EX_Port is connected to a Secure Fabric OS fabric, issue the portShow or 
portCf gExPort command, as described in the HP StorageWorks XPath OS 7.4.x command reference 
guide. 

Configuring a secure XPath OS DH-CHAP secret 

While Secure Fabric OS supports the SLAP, FCAP, and DH-CHAP authentication protocols to communicate 
with each switch, XPath OS 7.4.x supports only DH-CHAP. 

The MP Router does not initiate DH-CHAP authentication requests; it responds to DH-CHAP requests only 
from the edge switch to which it is connected— in this case, the Secure Fabric OS switch. 

DH-CHAP is set on the Fabric OS side of the configuration, rather than the XPath OS side. As soon as you 
connect the MP Router to a Secure Fabric OS switch, DH-CHAP authentication is initiated. 

The DH-CHAP secrets are configured both on the Secure Fabric OS switch and the MP Router. Each entry 
specifies the WWN of the peer to which it is connected. For example, on the MP Router, specify the 
WWN of the Secure Fabric OS switch and the secrets. On the Secure Fabric OS switch, specify the WWN 
of the front domain (EX Port) and the secrets. 

If a Switch Connection Controls (SCC) policy is defined, the WWN of the front domain (EX_Port) that is 
connected to the Secure Fabric OS switch should be present in the SCC list. See the HP StorageWorks 
Secure Fabric OS user guide for details about the SCC and other Secure Fabric OS features. 

Configuring a DH-CHAP secret word on the MP Router 

When configuring the DH-CHAP secret on the MP Router, you must know the WWN for the Fabric OS 
switch to set as the peer entry. To find out the WWN of this switch, log in to the switch as admin and issue 
the switchShow command. For example: 



switch : adinin> switchshow 



switchNaitie : 
switchType : 
switchstate : 
switchMode : 
switchRole : 
switchDomain : 
switchid: 
switchWwn: 
switchBeacon : 
Zoning : 



f cr_ino j o_14 

16.2 

Online 

Native 

Principal 

99 

f ffc63 

10:00:00:60:69:80:05:14 
OFF 

ON (cfgl) 



port 


0 


id 


N2 


No_ 


_Light 


port 


1 




N2 


No_ 


_Module 


port 


2 




N2 


No_ 


_Module 


port 


3 




N2 


No_ 


_Module 


port 


4 




N2 


No_ 


_Module 


port 


5 


id 


N2 


No_ 


_Light 


port 


6 




N2 


No_ 


_Module 


port 


7 




N2 


No_ 


_Module 


value 




8 = 


OxS 


3 





switch : aditiin> 



54 Using the FC-FC Routing Service 



when you have the necessary information, configure the secret words on the MP Router. 

1. Log in to the MP Router with administrative privileges. 

2. Issue the secAuthSecret command: 
secAuthSecret --set 

The secret must consist of 8 to 40 characters. 

Setting up secret keys does not initiate DH-CHAP authentication. DH-CHAP authentication is performed 
whenever a port or a switch is enabled. 

3. Follow the instructions provided on screen, as shown in the following example: 

a. Enter the port or switch WWN. 

b. Enter and confirm the peer secret. 

This is the secret that authenticates at the peer. 

c. Enter and confirm the local secret. 

4. After you have added all the DH-CHAP secret information, press Enter to indicate that you have 
completed the secret key setup. 

5. When prompted, enter y. 

The DH-CHAP secret is now stored in the secret word database and is ready for use. For example: 

router : admin> secAuthSecret --set 

This command sets up secret keys for the DH-CHAP authentication. 
The minimum length of a secret key is 8 characters and maximum 4 0 
characters. Setting up secret keys does not initiate DH-CHAP 
authentication. It is performed whenever a port or a switch is enabled. 

Following inputs should be specified for each entry. 

1. WWN for which secret is being set up. 

2. Peer secret: The secret of the peer that authenticates to peer. 

3. Local secret: The local secret that authenticates peer. 
Press Enter to start setting up shared secrets > 

Enter WWN, Domain, or switch name (Leave blank when done): 10:00:00:60:69:80:05:14 

Enter peer secret: 
Re-enter peer secret: 
Enter local secret: 
Re-enter local secret: 

Enter WWN, Domain, or switch name (Leave blank when done) : 
Are you done? (yes, y, no, n) : [no] y 
Saving data to key store... Done. 
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Configuring a DH-CHAP secret on the Fabric OS switch 

You must know the front domain WWN of the MP Router to use as the peer entry when setting the secret 
word on the Fabric OS switch. To discover the correct WWN, log in to the router and issue the 
portCf gExPort command as shown in the following example: 



router : aditiin> portcf gexport 10 


irur U J- u 




Admin : 


enabled 


State : 


NOT OK 


X5 T 1^ "F n T^m :a I" ■ 

IT J-U. J_U-LiUCLU • 


C U I. c: ) 


r^y~\ iis v~ a I" m i~m^ £rs ■ 




HiKjXj t; JT cLkjl. J.LJ . 


17 


Preferred Domain ID: 


35 


Front domain WWN: 


50:00:51:el:57:b0:0e:0a 


Fabric Parameters : 


Auto Negotiate 


R_A_TOV : 


Not Applicable 


E_D_TOV : 


Not Applicable 


Authentication Type: 


None 


DH Group: N/A 




Hash Algorithm: N/A 




Edge fabric's primary WWN: N/A 


Edge fabric's version stamp: N/A 



When you have the necessary information, configure the secret word on the Fabric OS switch. 

1. Log in to the switch with admin privileges. 

2. Issue the secAuthSecret command: 
secAuthSecret --set 



The secret must be between 8 and 40 characters. 

Setting up secret keys does not initiate DH-CHAP authentication. DH-CHAP authentication is performed 
whenever a port or a switch is enabled. 

3. Follow the instructions provided on screen, as shown in the following example: 

a. Enter the port or switch WWN. 

b. Enter and confirm the peer secret. 

This is the secret that authenticates at the peer 

c. Enter and confirm the local secret. 

4. After you have added all the DH-CHAP secret information, press Enter to indicate that you have 
completed the secret key setup. 

5. When prompted, enter y. 
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The DH-CHAP secret is now stored in the secret word database and is ready for use. For example: 



router : admin> secAuthSecret --set 

This command sets up secret keys for the DH-CHAP authentication. 
The minimum length of a secret key is 8 characters and maximum 40 
characters. Setting up secret keys does not initiate DH-CHAP 
authentication. It is performed whenever a port or a switch is enabled. 

Following inputs should be specified for each entry. 

1. WWN for which secret is being set up. 

2. Peer secret: The secret of the peer that authenticates to peer. 

3. Local secret: The local secret that authenticates peer. 

Press Enter to start setting up shared secrets > 

Enter WWN, Domain, or switch name (Leave blank when done) : 
50:00:51:el:57:b0:0e:0a 

Enter peer secret: 

Re-enter peer secret: 

Enter local secret: 

Re-enter local secret: 

Enter WWN, Domain, or switch name (Leave blank when done) : 
Are you done? (yes, y, no, n) : [no] y 
Saving data to key store... Done. 

Viewing a DH-CHAP secret word database 

1. Log in to the MP Router as admin. 

2. At the prompt, issue the following command: 

secauthsecret --show 



You should see output similar to the following: 



admin : 


: switch> secauthsecret 


--show 


WWN 


Did 


Name 


10 : 00 : 


: 00 : 60 : 69 : 80 : 05 : 14 1 


switch 



For details about the setAuthSecret command, see the HP StorageWorks Secure Fabric OS user guide. 

Setting a proxy PID 

When an MP Router is first configured, the PIDs for the proxy devices are automatically assigned. Proxy 
PIDs (as well as phantom domain IDs) persist across reboots. 

The most common situation in which you would set a proxy PID is when you replace MP Router hardware. 
You can minimize disruption to the edge fabrics by setting the proxy PIDs to the same values used with the 
old hardware. 

The f crProxyConf ig command displays or sets the persistent configuration of proxy devices. Used with 
the -s (slot) option, it can also influence the assignment of the xiate domain port number (which is used to 
determine the area field of the PID) and the AL PA field. Like the PIDs in a fabric, a proxy PID must be 
unique. If the slot argument results in a duplicate PID, it is ignored. See the f crProxyConf ig 
command in the HP StorageWorks XPath OS 7.4.x command reference guide for more details. 

Use the f crXlateConf ig command to display or assign a preferred domain ID to a proxy device. See 
the f crXlateConf ig command in the HP StorageWorks XPath OS 7.4.x command reference guide for 
more details. 
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Monitoring resources 

It is possible to exhaust resources, such as proxy PIDs. Whenever a resource is exhausted, the MP Router 
generates an error message. Messages are described in the HP StorageWorks XPath OS 7.4.x system error 
messages reference guide. 

You can monitor MP Router resources with the f crResourceShow command: 



router : adinin> f crresourceshow 

Daemon Limits : 

Max Allowed Currently Used 



LSAN Zones : 




1000 


9 


LSAN Devices 




10000 


75 


Proxy Device 


Slots : 


10000 


6 






WWN Pool Size 


Allocated 


Phantom Node 


WWN: 


4096 


2 


Phantom Port 


WWN: 


16384 


6 



Port Limits : 

Max proxy devices: 2000 
Max NR_PortS: 1000 

Currently Used(row 1: proxy, row2 : NR_Ports) : 

0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 



0066000000000000 
0044000000000000 
router : admin> 

See the HP StorageWorks XPath OS 7.4.x command reference guide for details about the command. 

Routing ECHO 

The MP Router and Fibre Channel Routing let you route the ECHO generated when an f cPing command 
is issued on a Fabric OS-based switch, providing f cPing capability between two devices in different 
fabrics across the MP Router. 



^ NOTE: Each MP Router in a backbone fabric routing to McDATA fabrics must have XPath OS 7.4.x or 
later installed. Fabrics that consist entirely of HP devices work with MP Routers using XPath OS 7.1 .2, 7.3.x, 
or 7.4.x. 



Chiecking for Fibre Chiannel connectivity problems 

1. On the Fabric OS switch, issue the fcPing command, which: 

• Checks the zoning configuration for the two ports specified 

• Generates an Extended Link Service (ELS) frame ECHO request to the source port specified and 
validates the response 

• Generates an ELS ECHO request to the destination port specified and validates the response 

Regardless of the device's zoning, the f cPing command sends the ELS frame to the destination port. A 
device can take any one of the following actions: 

• Send an ELS Accept to the ELS request. 

• Send an ELS Reject to the ELS request. 

• Ignore the ELS request. 
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There are some devices that do not support the ELS ECHO request. In these cases, the device either 
does not respond to the request or sends an ELS reject. When a device does not respond to the ELS 
request, further debugging is required; hov/ever, do not assume that the device is not connected to the 
Fibre ChanneL 

For details about the f cPing command, see the HP StorageWorks Fabric OS command reference guide. 

Connecting to McDATA SANs 

XPath OS 7.4.x furnishes the MP Router with the ability to connect to McDATA fabrics in McDATA Open 
mode. Consult the follov/ing sections: 

• Connectivity features, next 

• Supported modes, page 59 

• Configuring the fabrics for interconnectivity, page 61 

Connectivity features 

XPath OS 7.4.x lets you connect an HP fabric to a McDATA fabric. Because of the high degree of 
connectivity HP provides, the devices across the remote fabrics can be shared. 

Interconnectivity benefits 

Connected SANs provide additional functionality not possible v/ith segregated SANs. Some of these 
include: 

• Island consolidation— Use the XPath OS 7.4.x MP Router to connect isolated McDATA and HP Fabric 
and share devices. 

• Backup consolidation— Consolidate backup solutions across HP and McDATA fabrics. 

• Manageable large scale storage netv/ork— Use the XPath OS MP Router to localize traffic v/hile 
connecting devices in the meta-SAN. This provides a large number of fabrics with a large number of 
devices. 

• Sharing across a FCIP link— Share devices between HP and McDATA fabric over campus Ethernet or 
over long-distance IP links beyond 1000 km. 

• Sharing across a long-distance FC link— Share devices between HP fabrics over long-distance FC links 
as far as 300 km. 

• LUN sharing— Use a high-end RAID array connected to a McDATA director to share targets with an HP 
fabric; just connect one McDATA director port to an MP Router EX Port and the one EX Port to the HP 
fabric. 

Connectivity 

Check for the latest list of tested and approved equipment, see the HP StorageWorks SAN Design Guide at 
http:/ /hi 8006. www 1 .hp.com/ products/storageworks/san/documentation.html . 

Scalability 

The connectivity limitations of a meta-SAN comprising HP and McDATA fabrics are defined on each side 
by the scalability of the individual fabric. 

Every EX Port connected to a McDATA fabric uses one domain ID per link. This can potentially cause 
problems because McDATA supports of a maximum of 31 domains in a fabric (in McDATA Fabric 1 .0 
mode). One translation domain per edge fabric is also created. 

Check for the latest list of tested and approved equipment, see the HP StorageWorks SAN Design Guide at 
http:/ /hi 8006. www 1 .hp.com/ products/ storageworks/san/documentation.html . 

See the McDATA fabric documentation for McDATA scalability limitations. 

Supported modes 

XPath OS 7.4.x supports connectivity with McDATA Open mode. To allow interconnectivity with McDATA 
SANs, the CLI command portCf gExPort uses the -m parameter to indicate the connectivity mode. Valid 
parameters are described in Table 6. 
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Table 6 portCfgExPort -m interop parameters 



Value 


Description 


0 


HP Native (default) 


1 


McDATA Open mode 



See the HP StorageWorks XPath OS 7.4.x command reference guide for details about the 
portCf gExPort command and other XPath OS commands. 

Once the port is properly configured and connected, log in to the MP Router and issue the switchShow 
command. For example: 



router : adinin> 


swltchshow 














Switch Name 


routerA 














Switch State 


Online 














Switch Type 


38.2 














Switch Role 


Subordinate 














Switch Domain 


1 














Switch ID 


FFFCOl 














Switch WWN 


10 : 00 : 00 : 05 : le: 15 : 02 : 00 














beacon status 


OFF 














zoning 


OFF 














FC router BB Fabric ID: 1 














Port Media Speed State Info 














0 id Nl Online EX_PORT 10:00:0 


3:00 


:8 


3 : 40 : 


50 


:ac "" (fabric id = 10) 




1 id Nl Online EX_PORT 10:00:0 


3:00 


: 8 


3 : 40 : 


50 


:ac "" (fabric id = 10) 




2 id N2 Online E_PORT 10:00:00 


:05: 


le 


:13:8 


3 : 


00 "routerB" (upstream) 




(output truncated) 














13 — AN No_Module 














14 id N2 


Online EX_PORT 10:00:00:60 


69: 


30 


04:9 


8 


'swl2kA21" (fabric id = 


11) 


15 id N2 


Online EX_PORT 10:00:00:60 


69: 


30 


04:9 


8 


'swl2kA21" (fabric id = 


11) 


router : admin> 

















The McDATA switch connected to the MP Router's EX_Port is visible. On the McDATA side, the show 
command also shov/s the front domain. 

If the LSAN is configured and the proxy devices are created, the proxy device shows up in the Name 
Server of the edge fabric. The xiate domain also shows in the fabric of the edge fabric. 
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Configuring the fabrics for interconnectivity 

When connecting an HP fabric with a McDATA fabric using the MP Router, you must configure the switch 
on both fabrics as well as the MP Router. This configuration is described in the following sections: 

• Configuring the MP Router, next 

• Preparing the HP StorageWorks switch for connectivity, page 63 

• Configuring the McDATA fabric for interconnection, page 64 

• Completing the configuration, page 68 

Configuring the MP Router 

When configuring your HP StorageWorks fabric to connect to a McDATA fabric, you must perform some 
preparation on the MP Router: 

1. Using the version command, make sure that XPath OS 7.4.x is installed on the MP Router: 

router : adinin> version 

Installed Packages: 

Package Name: xpath_os_v7 . 4 . 0_prealphal_bldl7 
Install Date: Apr 14, 2005 18:48 

router : admin> 

2. On the MP Router, stop the EX_Port being configured (the one connected to the HP StorageWorks 
switch) by issuing the portStop command. 

You can verify that the port has been stopped by issuing the portShow command for the port. 

In the following example, port 14 is used on the HP side to connect the HP fabric to a McDATA fabric. 
The McDATA fabric is connected from port 1 . 



router : admin> 


port show 14 




port 


14 info 






Configuration 


Current 


Name : 


port 14 




State: 


STARTED 


DOWN 


Type : 


FC 


FC 


Link Status : 


DISABLED 


DOWN 


Topology: 


P-P 


P-P 


Speed: 


AN 


AN 


LinkCost : 


AUTO 




Distance : 


LO 


LO 


WWN: 


20 : 01 : 00 : 05 : le 


16 : If : 08 


Licensed 


: NO 




Diag result 


: PASSED 




inFrames : 


0 




outFrames : 


0 




inOctets : 


0 




outOctets : 


0 




discards : 


0 




router : admin> 







3. Using the portCf gExPort command, configure the port as an EX_Port and provide a Fabric ID (FID). 

If no FID is specified, multiple links to the same fabric are assigned different FIDs. This results in a front 
domain oversubscription. 

For the HP StorageWorks fabric, use the -p flag of the portCf gExPort command to match the PID 
setting for the fabric to which you are connecting. This port will connect to the HP StorageWorks switch. 
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The following example sets port 14 to admin-enabled, assigns a Fabric ID of 10, and sets the port to 
Core PID. For complete information about any XPath OS command, see the HP StorageWorks XPath OS 
7.4.x command reference guide. 

switch ;ac3inin> portcf gexport 14 -a 1 -f 10 -p 1 

4. Restart the port by issuing the portStart command. 

5. Still on the MP Router, use the portStop command to stop the EX_Port that is to be used to connect to 
the McDATA switch. 

router : admin> portstop 1 
port 1 stopped, 
router : ac3inin> 

6. Issue the portCf gExPort command to configure the port as an EX_Port with a different FID within the 
McDATA Fabric PID mode. 

This port can now connect to a McDATA switch in McDATA Open mode. 

The following example sets port 1 to admin-enabled, assigns a Fabric ID of 1 1, and sets the McDATA 
connection mode to McDATA Fabric. For complete information about XPath OS commands, see the HP 
StorageWorks XPath OS 7.4.x command reference guide. 

router : adinin> portcf gexport 1 -a 1 -f 11 -m 2 

7. Restart the port by issuing the portStart command. 

8. You can now physically attach your ISLs from the MP Router to the switches. 

ISLs apply only to HP switches that are not connected as an edge fabric (IFLs). When a McDATA switch 
is present, it is assumed that you are creating an edge fabric. 

For details about interswitch linking, see Chapter 8, "Using ISL trunking." 

9. Capture a SAN profile of the McDATA and HP SANs, identifying the number of devices in each SAN. 

By projecting the total number of devices and switches expected in each fabric when the LSANs are 
active, you can quickly determine the status of the SAN by issuing the commands nsAllShow and 
f abricShow on the HP fabric and using SAN Pilot (see Figure 7) or EFCM to gather similar 
information for the McDATA fabric. For example, on the HP side: 



router ; admin> f abricshow 
Switch ID Worldwide Name 








Enet IP Addr 


Name 


1: fffcOl 10:00:00:05:le: 
100: fffc64 10 : 00 : 00 : 05 : le: 


:15; 
:13 ; 


: 02 ; 
;83: 


:00 
:00 


192.168.11.25 
192.168.12.25 


"routerA" 
> " routerB" 


The Fabric has 2 switches 












router : admin> 
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Product Fabrics View Configure Logs Maintenance Help 


[i,|eg||a| iDomalnID -| |H||a||iQ| |TK K K 
|proclucts [Fabrics 


c 



B McDATA 10:a0:08:00:88:6a:20:cg 

m J,McDATA-10:00:08:00:8B:A0:10:39 
1 IS :J McDATA-50:80:08:ai:3a:30:0E:0n 
I B U McDATA 50:80:08:S1:3S:3B:0E:B1 
i j iLj 5I):00:51:E3:12:F5:0F:04 
i IS JiMcDATA-10:00:08:00:8a:60:20:CS 
BMcDATA 1 0:08:08:80:88:40:30:00 

( U McOATA-50:80:08:81:50:20:0E:00 
IS :_J 50:00:51:E3:16:03:0F:07 
1 [J McOATA 50:80:08:81:50:28:0E:81 
B _\ McDATA-ia:0a:aS:aa:S8:Aa:1C:a 

EMC 58:00:81:08:40:84:03:95 
E J, McOATA-10:00:08:00:88:40:50:AC 
QLDoic-2 1 :aa:0a:E0:8B:a4:Sa:76 
OLdoIc 2 1 :00:80:E8:8B:04:FC:75 



McOATA-10:00:08:00:88:40:30:D[ 



EMC-50:06:04:82:CA:FD:B7:2C 



Fabric Name: McOATA- 10:00:00:00:08:40:30:00 



Switch Count: 6 




Domain Id: 20 



Domain Id: 21 



1[TopoIo[|v [zone Set 



EFC ^ Call Home 



Figure 7 SAN Pilot 

Preparing the HP StorageWorks switch for connectivity 

Now that the MP Router is configured to connect to a McDATA fabric, you must create your LSAN and 
zones for the SAN. Either of the following procedures may be used. 

1. Create a telnet connection to the HP StorageWorks switch. 

You can also use Advanced Web Tools to perform this procedure. 

2. Configure the LSAN, using the LSAN xxxx naming schema. 

In the following example, two LSANs are created for two devices: LSAN host l and LSAN_Host_2. 

switch: admin > alicreate "lsan_liost_l" , "10 : 00 : 00 : 00 : c9 : 08 : 05 : 00 " 
switch:admin > alicreate " lsan_host_2 " , "10 : 00 : 00 : 00 : c9 : 08 : 04 : 00 " 



3. Create the zone. 

In the following example, the zone LSAN l is created, and the LSANs created in the previous step are 
added to it.: 

switch: admin > zonecreate "LSAN_1", "lsan_host_l; lsan_host_2" 



4. Issue the cf gShow command to verify that the zones are correct: 

switch : admin> cfgshow 
Defined configuration: 

zone: LSAN_1 lsan_host_l ; lsan_host_2 

alias: lsan_host_l 

10:00:00:00:c9:08:05:00 

alias: lsan_host_2 

10:00:00:00:c9:08:04:00 

Effective configuration: 
no configuration in effect 

5. Issue the cfgCreate command to create the domain and add the zone: 

switch : admin> cfgcreate "Domainl", "LSAN_1" 
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6. Issue the cfgEnable command to enable the zone configuration.: 

switch : adinin> cfgenable "Domainl" 

zone config "Domainl" is in effect 
Updating flash . . . 

7. Optional: Reissue the cf gShow command to verify that the zoning is correct.: 



switch : 


admin> cfgshow 






Defined 


configuration : 






cfg: 


Domainl LSAN_1 






zone : 


LSAN_1 lsan_host_l; 


: lsan_ 


_host_2 


alias : 


lsan_host_l 








10:00:00:00 


:c9:08 


:05:00 


alias : 


lsan_host_2 








10:00:00:00 


:c9:08 


:04:00 


Effective configuration: 






cfg: 


Domainl 






zone : 


LSAN_1 10:00:00:00 


:c9:08 


:05:00 




10:00:00:00 


:c9:08 


:04:00 



Alternately, use the following procedure: 

1 . Create a telnet or Advanced Web Tools connection to the HP StorageWorks switch. 

2. Configure the LSAN, using the LSAN xxxx naming schema, and append the new LSAN to the active 
zoneset. 

3. Enable zone configuration that now includes the new LSAN. 

Configuring the McDATA fabric for interconnection 

To ensure connectivity with the HP fabric, the McDATA fabric must be prepared for use with the MP Router. 
Either of the following procedures may be used. 



^ NOTE: The procedures described in this section were current when the document was written, but may 
have changed slightly since then. For the most up-to-date information, see the McDATA documentation 
about zone configuration on McDATA fabrics. 



1. Log in to SAN Pilot or EFCM (see Figure 8). 
ED5000 uses only EFCM. 

2. From the Configure menu, select Zones (Zoning Library on EFCM). 

3. Tab to Zones. 
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Oitplsy PnwKitiw Zones Dttpiff Man Zctki 

!| LSAM ilalHbcaU fcjTOOip J 
IXh<> i| i»latoc21l dmilOQPIfab 



I* 



SAN Pilot EFCM 
Figure 8 SAN Pilot and EFCM zones 

4. Enter the desired name in the Zone Name box using the LSAN xxxx naming schema. 

• In EFCM, move to the list of ports and nodes, and highlight the devices to include in the LSAN. 

• In SAN Pilot, click Add New Zone and then select the nev/ zone to display the Modify Zone tab (see 
Figure 9). Add the desired devices to the zone. 











Configure: 


/ 29 / 05 at 1 0: 1 0:39 




r Ports 1 Swildi | Management | 


Zoning 1 Securily | Ferf cirmance | 






Zone Set Zones [Modify 


Zone ] 




View 




Displayed Zoning Configuration is: Unsaved 




Configure 












Zone: |lsan_Z33B 


Rename Zone 




Monitor 








Operations 




Add New Zone Member: 






Heip 




Attacined Node WWN: |Domain 2,50:06:01:60:'IO:0'l:D3:95 _J AddMember | 








Worid Wide Name: | 


Add Member | 








Domain iD: |g 


Port Number: [o Add Member | 








Display Previous H/lembers 


Display iWore iWemfiers 








AH Zone Members Displayed 










Display Previous Members 


Display More Members 











Figure 9 Modify Zone tab 

5. To add devices that are connected to the HP fabric, enter the WWN into the World Wide Nome field 
and then click Add Member (see Figure 1 0). 
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View 

Configure 

Monitor 

Operations 

Heip 



r 



Configure' ^efr^-4/29/05at10:33:1S 

FortB I Switdi | Mggiagemenl | Zcmmg | S eqirily | Ferf omiBgice | 



Zone Set Zones | Modify Zone | 



Displayed Zoning Configuration is: Unsaved 



Zone: |LSAN_«67S3 



Rename Zone 



Add New Zone Member: 

Attached Node WWN: | Domain 2, 5O:0B:O1 :BO:^0:0^:D3:95 3 Add Member 
World Wide Name: I Addl^lemlier 



Domain iD: 6 Port Number: P 



Add tvlember 



Display Previous Members 
Delete I 21 :00:00:E0:8B:04:80:76 



AiiZone Members Displayed 
Display Previous Members 



Display More Members 



Display More Members 



Figure 10 World Wide Name box 

If you are using EFCM, use Add Detached Node to enter the WWN port name (see Figure 1 1 ). 



X-EFC: Modify Zone 



Zone Name: ]LSAN_fi;4700spbO_slalabi;200 
-Attached ports/nodes 



Fabric: McDATA-10:00:08:00:88:60:20:C9 -r 



• Domain 2 ((ii|i;DATA-50:80:08:81 :38:30:0E:00) 

• Domain 3 ((*li;DATA-50:80:08:81 :38:30:0E:01) 
B J Domain 4 (50:00:51 :E3:1 2:F5:0F:04) 

• E(ii|C-50:06:04:82:CAFD:B7:23 

B J Domain 31 ((ilcDATA-l 0:00:08:00:88:60:20:... 

• PortIO EMC-50:06:04:82:CAFD:B7:03 



rMembers in zone- 



EMC-50:06:01:68:40:04:D3:95 
Emulex-1 0:00:00:00:C9:2D:3D:5C 



(S) Add by VWVN 
O Add by Port 



Display Options... 



EFC: Add Detactied Node 



(S) Worldwide Name 
O Nickname 



\ Detached Node... 



Figure 1 1 Modify zone window 

6. Move to the Zone Set tab in SAN Pilot. 

If you are using EFCM, or the Zoneset Library window, tab to Zone Sets and select File > New. 



66 Using the FC-FC Routing Service 



7. Enter a name for the zoneset in the Zone Set Name box. 

8. Select the zone to include in this zoneset and click Add Zone Set. 
The steps for EFCM are similar. 

9. In SAN Pilot, click Save and Activate Zoning Configuration. 

In EFCM, return to the main window and select Configure, and then select Activate Zone Set to launch 
the zoneset activation window (Figure 1 2). 




Figure 1 2 Activate zone set 

10. Highlight the zoneset to be activated and then click Next. 

1 1 .Click Next again, and then click Start to activate your zoneset. 

12. Regardless of the method used, verify that the new zoneset containing your LSAN has been added. 
Alternately, use the following procedure: 

1. Create the LSAN, using the LSAN xxxx naming scheme. 

2. Append the newly created zoneset to a currently active zoneset. 

3. Activate the updated zoneset. 

LSAN zoning 

An LSAN is defined by a zone in an edge fabric. When zoning an LSAN containing multiple 
manufacturers' fabrics (such as an HP-McDATA SAN), you must use port WWNs. Because port IDs are not 
necessarily unique across fabrics, you cannot use the domain, port method of identification. 

For more details about LSAN zoning, see "LSANs and zoning" on page 48. 

If the LSAN devices appear only in one of the fabrics within a multiple-fabric SAN, use the following 
procedure to correct the problem: 

1. Log in to each fabric and verify that all the devices are physically logged in. 

2. Verify that the devices are properly configured in the LSAN zone in both edge fabrics. 

3. Issue the f abricShow command on the HP fabric. 

4. Use McDATA's EFCM or SAN Pilot to verify the McDATA fabric, including the front and translation 
domains. 
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5. Move back to the MP Router and issue the f crProxyDevShow command to verify that the devices are 
configured and exported. For example: 



router : admin> 


f c r P r oxyDe vShow 












Proxy 






WWN 




Proxy 


Device 


Physical 


State 


Crea.ted. 










PID 


Exists 


PID 




in Fa.h)ric 












in Fabric 






10 20 : 


;00 


:00; 


:01:73:00:59; 


;dd 


05f001 


12 


510902 


Imported 


10 21 : 


;00 


:00: 


:e0:8b:04:80: 




n 9 f n n 9 

U Z J_ u u z 




7 A n 7 1 


Ttym^ i~ ^ 
-LllipUJl Led 


10 50; 


;06 


:01: 


:68:40:04:d3; 


;95 


02f 001 


11 


660713 


Imported 


11 10 ; 


:00 


:00; 


;00:c9:2d:3d; 


;5c 


020001 


10 


011500 


Imported 


11 50; 


:06 


:01; 


:60:40:04:d3; 


;95 


020002 


10 


011400 


Imported 


router ; admin> 

















6. Create a telnet connection and configure the connection to capture text. 

7. Issue the supportShow command, and save the output. 

8. If the fabric does not appear: 

a. Disable the EX Port on the connected fabric. 

b. Issue the portLogClear command for the port. 

c. Enable the port on the MP Router. 

d. Issue the portLogDump command for the port, capturing the output. 

e. Use the portLogDump tool to troubleshoot the problem, using the command output. 

1^ NOTE: If an EX_Port connecting an MP Router and an edge fabric is disabled due to an error, the error 
causing that port's most recent disabled state appears in the switchShow command output. This error 
appears until that port comes back online, even after the cables have been detached from the port. To 
remove the error listing in the switchShow output, reboot the MP Router. Possible errors displayed under 
this condition include: 

ISW_PORT_ERR_TYPE_UNKNOWNISW_PORT_ERR_TYPE_LICENSE 

ISW_PORT_ERR_TYPE_FTAG_OVERISW_PORT_ERR_TYPE_FTAG_CONFLICT 

ISW_PORT_ERR_TYPE_FOWNER_CONFLICTISW_PORT_ERR_TYPE_ZONE_RESOURCE 

ISW_PORT_ERR_TYPE_PORT_STATE_TOISW_PORT_ERR_TYPE_AUTHN_REJECT 

ISW_PORT_ERR_TYPE_SEC_FCS_LISTISW_PORT_ERR_TYPE_SEC_FAILURE 

ISW_PORT_ERR_TYPE_INCOMPATIBLE_MODEISW_PORT_ERR_TYPE_SEC_SCC_LIST 



3ting the configuration 

After the MP Router, HP StorageWorks switch, and McDATA switch have been prepared for use, complete 
the configuration using the following procedure: 

1 . Physically connect the EX Port that you configured for the HP switch to the MP Router. 

2. Log into the HP switch as admin. 

3. Issue the f abricShow command. 

New domains should be visible for each ISL (front domain) that connects the HP switch to the MP 
Router, and one domain should be visible for the translate domain. 

4. Physically connect the configured MP Router's EX Port to the McDATA switch. 

5. Start SAN Pilot (or EFCM) and select the fabric for the McDATA switch. 

6. View the fabric topology. 

New domains should be visible for each ISL that connects the McDATA switch to the MP Router, and 
one domain should be visible for the translate domain. 

In EFCM, the McDATA switch should appear green, and the front domains (as well as the translate 
domain) are grayed out and inaccessible: EFCM cannot manage them. Tab to Zone and verify that the 
zoneset configuration is correct: A blue icon beside each entry indicates that the devices are logged 
into the fabric. 
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Log in to the HP StorageWorks switch and issue the nsAllShow command. 

All the devices from both LSANs should appear in the output. If they do not, issue the cfgShow 
command to verify your zone configuration. 
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5 Using the FCIP Tunneling Service 



The optional FCIP Tunneling Service enables Fibre Channel frames to funne/ through IP networks by 
dividing frames, encapsulating the result in IP packets upon entering the tunnel, and then reconstructing 
them as they leave the tunnel. The FCIP Tunneling Service is discussed in the follov/ing sections: 

• Synchronizing time, page 71 

• Configuring an FCIP interswitch link, page 72 

• Disabling and enabling an FCIP interswitch link, page 76 

XPath OS supports eight FCIP interswitch links between two MP Routers. All 16 links can be used as FCIP 
links with the remaining links going to other routers. 

Ports configured for FCIP are called virtual E Ports (VE Ports). After you configure the VE Ports on the two 
MP Routers, an FCIP connection is established between them. 

Fibre Channel frame encapsulation on one VE Port and the reconstruction of Fibre Channel frames on the 
other VE_Port are transparent to the initiator and target, but the administration of VE_Ports is different than 
the administration of other Fibre Channel port types. 

Figure 1 3 shows a portion of a Fibre Channel network using FCIP. The FCIP interswitch link (VE Ports 
connected through the IP network) joins the two SANs (Fabric 1 and Fabric 2) into parts of a larger SAN. 




Router Router 
Figure 13 Network using FCIP 



Synchronizing time 

Fibre Channel framing and signaling standards require that a Fibre Channel fabric define and enforce a 
frame lifetime. The standard defined timeout values are R A TOV and E D TOV. 

The FCIP and Fibre Channel frame encapsulation RFCs add wide-area-network (WAN) timeout value 
(WAN_TOV). When a Fibre Channel frame is encapsulated, the encapsulation header includes a 
timestamp. The current time, WAN TOV, and the timestamp are checked when the frame is reconstructed 
upon leaving the tunnel. If the lifetime of the frame exceeds the WAN TOV, the frame is discarded. 

If the time settings for the MP Routers at the two ends of an FCIP interswitch link are not synchronized, 
frame lifetime calculations are not meaningful. If the receiving MP Router time lags the sending router time, 
frames that should be discarded are not discarded; if the receiving router time leads the sending router 
time, frames are discarded that should not be discarded. 

You can avoid this problem by synchronizing both ends to the same NTP server. Use the tsClockServer 
command to specify an NTP server for time service. See "Synchronizing time with on NTP server" on 
page 23 for a procedure. Use the configure command to set WANTOV to a value higher than 1 000 
ms. Enable WAN_TOV enforcement on an FCIP port with the portCf gFcip command. 
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figuring an FCIP interswitch link 

You must configure both the local and the remote MP Routers to enable an FCIP ISL. This configuration 
requires the use of the portCfgFcip command (not the portCf gExPort command). 

If the two MP Routers have a direct connection between them (no router in between), the IP addresses for 
both routers must be in the same subnet, and the default gateway setting is not required. 

If two MP Routers are connected through a router, the IP addresses for both MP Routers must be in different 
subnets and the default gateway must be set on both the MP Routers. (Typically, the default gateway is the 
router's IP address.) 

The basic steps for configuring an FCIP ISL between two MP Routers are: 

1. Configure the local MP Router: 

a. Issue the portStop command to stop a port. 

b. Issue the portType command to configure the port for GigE. 

c. Issue the portCf gGige command to configure the IP network parameters and ensure that the port 
is set as an FCIP GigE port. 

d. Issue the portCfgFcip command to enable the VE_Port. 

2. Configure the remote MP Router: 

a. Issue the portStop command to stop a port. 

b. Issue the portType command to configure the port to be a GigE port. 

c. Issue the portCf gGige command to configure the IP network parameters. 

d. Issue the portCfgFcip command to enable the VE_Port and configure the VE_Port to initiate the 
setup of the FCIP ISL. 

1^ NOTE: For all Continuous Access EVA configurations using FCIP, you must set trunking to SID_DID or 
none. See the FCIP portcfgf cip command. 



1^ NOTE: All ports on an MP Router are optical ports. To connect a VE_Port to a copper network, use an 
optical-to-copper converter. 



Figure 14 illustrates the topology and port values used in the configuration example in the following two 
procedures. 




Router Router 



Figure 14 Example for configuration procedures 
The configuration example uses the following values: 

• Port 1 (IP address 1 0.2.3.22) on the local MP Router 

• Port 4 (IP address 1 0.2.3.23) on the remote MP Router 

• IP network subnet mask 255.255.255.0 
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The example sets the port type to GigE, sets the GigE port parameters, and configures and enables the 
FCIP ISL 

See the portType command in the HP StorageWorks XPath OS 7.4.0 command reference guide for 
additional information on configuring GigE ports and the portCf gGige command for additional 
information on configuring GigE parameters for the ports. 

A given port can be configured for only one FCIP ISL. 

Configuring the local MP Router 

1 . Stop the port: 

router : admin> portstop 1 
port 1 stopped. 

2. Configure Port 1 to be a GigE port: 

router : adinin> porttype 1 g 
port 1 set to type GIGE 

3. Set the GigE port parameters. 

The following example is for local and remote ports on the same subnet: 

router : adinin> portcfggige 1 -i 10.2.3.22 -n 255.255.255.0 -v 1 -p fcip 

port 1 proto set to: fcip 
port 1 proto ver set to: 1 

If the local and remote ports are on different subnets, use the -g option to specify the gateway: 

router : admin> portcfggige 1 -i 10.2.3.22 -n 255.255.255.0 -g 10.2.3.1 
-V 1 -p fcip 

4. Start the port: 

router : adinin> portstart 1 
port 1 started 

5. Disable the FCIP tunnel: 

router : admin> portcfgfcip 1 -a 2 

port 1 admin status set to : 2 

6. Set the local port to listen for the remote port: 

router : admin> portcfgfcip 1 -i 0.0.0.0 

7. Re-enable the FCIP tunnel: 

router : adinin> portcfgfcip 1 -a 1 

port 1 admin status set to : 1 

Configuring the remote MP Router 
1 . Stop the port: 



router : admin> portstop 4 




port 4 stopped. 





2. Configure the port as a GigE port: 

router : admin> porttype 4 g 
port 4 set to type GIGE 
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3. Set the GigE port parameters. 

The following example is for local and remote ports on the same subnet: 



router : adinin> portcfggige 4 -i 


10.2.3.23 -n 


255.255.255.0 -v 1 -p fcip 


port 4 proto set to: fcip 






port 4 proto ver set to: 


1 




port 4 ipaddress set to: 


10 . 2 . 3 . 23 




port 4 net mask set to: 


255.255.255. 


.0 



If the local and remote ports are on different subnets, use the -g option to specify the gateway: 



router :admin> portcfggige 4 -i 10.2.4.23 -n 255.255.255.0 -g 10.2.4.1 
-V 1 -p fcip 

4. Start the port: 

router : admin> portstart 4 
port 4 started 

5. Disable the FCIP ISL: 

router : admin> portcfgfcip 4 -a 2 

port 1 admin status set to : 2 

6. Set the remote port to send to the local port: 

router : admin> portcfgfcip 4 -i 10.2.3.22 

7. Re-enable the FCIP ISL: 

router : admin> portcfgfcip 4 -a 1 

port 1 admin status set to : 1 

Verifying thiat the connection is up 

Use the rnPing command. The following example pings the remote port at IP address 10.2.3.23, using a 
packet length of 1 200 bytes. The example assumes the MP Routers are on the same subnet. You can issue 
the portShow command to see the port configuration and the f cipShow command to see FCIP protocol 
information: 
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router : adinin> 


rnping 


1 10.2. 


3.23 


-1 1200 






Pinging 10 


2.3 


.23 












Reply from 


10 . 


2.3.23 


bytes= 


1200 


time<14ms 


TTL 


=255 


Reply from 


10 . 


2.3.23 


bytes= 


1200 


time<14ms 


TTL 


=255 


Reply from 


10 . 


2.3.23 


bytes= 


1200 


time<14ms 


TTL 


=255 


Reply from 


10 . 


2.3.23 


bytes= 


1200 


time<14ms 


TTL 


=255 


Reply from 


10 . 


2.3.23 


bytes= 


1200 


time<14ms 


TTL 


=255 



The rnping is completed 
router : admin> portshow 1 
port 1 info 

Configuration 



Current 



Name : 
State: 
Type : 

Link Status: 
IP addr: 
Net mask: 
Default route: 
Mac address : 



port_l 
STARTED 
GIGE 
ENABLED 
10 .2 . 3 .23 
255.255.255.0 
0.0.0.0 0.0.0.0 
00:05:le:31:30:51 



UP 
GIGE 
UP 

10 . 2 . 3 . 23 
255.255.255.0 



Protocol : 
Base OS version 
IPS version 
Diag result 



fcip ver 1 
7.1.0. 0 .BS25 
7.1.0. 0 .BS25 

PASSED 



fcip ver 1 



router : admin> fclpshow 1 

fcip protocol info (port 

Configured 



1 1) 



State: 

Local IP addr: 
Remote IP addr: 
WAN_TOV timeout 
Remote WWN: 
Time sync state 



Current 
UP UP 
10.2.3.23 10.2.3.23 
0.0.0.0 0.0.0.0 

enabled enabled 

00:00:00:00:00:00:00:00 00:00:00:00:00:00:00:00 

synchronized 



in_f rame_ip : 


15370 


in_f rame_f c : 


15372 


out_f rame_ip : 


15372 


out_f rame_f c : 


15370 


in_octet_ip : 


129600 


in_octet_f c : 


693260 


out_octet_ip : 


693260 


out_octet_f c : 


742688 


error_f rame_ip : 


0 


error_f rame_f c : 


0 


error_resync : 


0 


drop_f rame_f c : 


0 


drop_f rame_ip : 


0 


f rame_timeout : 


0 


authen_f allure : 


0 
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Disabling and enabling an FCIP interswitch link 

You can disable a configured FCIP ISL by changing the admin state to disabled on both the local and the 
remote MP Router, using the following syntax: 

portcfgfcip portnumber -a 2 

You can re-enable a disabled FCIP ISL by changing the admin state to enabled on both the local and 
remote MP Router, using the following syntax: 

portcfgfcip portnumber -a 1 
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6 Using the iSCSI Gateway Service 



The HP iSCSI Gateway Service facilitates communication between TCP/IP networks and Fibre Channel 
SANs. It displays iSCSI gateway configuration information across multiple MP Routers. The iSCSI Gateway 
Service is discussed in the following sections: 

• Summary of configuration steps, next 

• Configuring an iSCSI portal, page 78 

• Configuring iSCSI gateway zones, page 79 

• Configuring CHAP, page 80 

• Administering iSCSI configurations, page 80 

• Working with the WWN mapping table, page 82 

• Enabling and disabling failover, page 82 

XPath OS supports eight iSCSI sessions per port and 96 sessions per MP Router. 

Figure 1 5 shows a simple application of the iSCSI Gateway Service, in which an iSCSI initiator 
communicates with a Fibre Channel target through an iSCSI gateway. The gateway projects the initiator 
onto the Fibre Channel SAN, and projects the target onto the TCP/IP network. The iSCSI gateway converts 
iSCSI to FCP FC-4 protocol and maps iSCSI fully qualified names (IQNs) from TCP/IP to Fibre Channel in 
a process called IQN-to-WWN mapping. 

The projection of an iSCSI initiator into the Fibre Channel SAN creates a proxy Fibre Channel initiator, the 
projection of a Fibre Channel target to the TCP/IP network creates a proxy iSCSI target. The proxy initiator 
fully participates in access controls, such as zoning, and the proxy target responds like a regular iSCSI 
target. 




Figure 15 Simple application of the iSCSI Gateway Service 

TCP/IP servers can use iSCSI arrays that are directly connected to the IP network; Fibre Channel servers 
connected to the SAN can use Fibre Channel arrays. 

An iSCSI portal cannot be used for any other purpose, but other ports on the same MP Router can be used 
for any other HP multi-protocol routing service. 

You can achieve access control by configuring iSCSI initiators and the iSCSI portal to use iSCSI challenge 
handshaking authentication protocol (CHAP). CHAP allows remote servers and clients to exchange 
authentication credentials securely. 

If you define iSCSI portals on multiple MP Routers, iSCSI drivers that support failover can fail over from one 
portal to another if the connection to the first portal is lost. 
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If there are multiple iSCSI portals on one MP Router, configuration information, such as IQN-to-WWN 
mapping and CHAP secrets, is automatically shared among the portals. If there are iSCSI portals on more 
than one MP Router, you can use the IP fabric configuration server (iFCS) to control the sharing of iSCSI 
gateway configuration information across multiple MP Routers. 



Figure 16 iSCSI gateway configuration 

The steps required to configure an iSCSI gateway are summarized below and detailed in the referenced 
sections. 

1. Configure an iSCSI portal on the MP Router. 

Use the procedure in "Configuring an iSCSI portal" on page 78. 

2. Optional: Create zones with the iSCSI initiators and the Fibre Channel targets as zone members. 
See "Configuring iSCSI gateway zones" on page 79 for details. 

3. Optional: Configure CHAP access control for the Fibre Channel targets. 

Use the procedure in "Configuring CHAP" on page 80 to configure the shared secret for the Fibre 
Channel targets. 

4. Install and configure the iSCSI initiator driver. 

You must assign a unique ION to the driver. If you configured CHAP for the target in step 3, you must 
configure matching CHAP shared secrets. See the iSCSI driver documentation for details on how to 
configure the driver. 



1^ NOTE: All ports on an MP Router are optical ports. To connect a port to a copper network, use an 
optical-to-copper converter. 



Use the following procedure to configure a port as an iSCSI portal: 

1 . Issue the portStop command to stop the port. 

2. Issue the portType command to set the port for GigE. 

3. Issue the portCf gGige to set the GigE port parameters, ensuring that the port is set as an iSCSI GigE 
port. 

4. Issue the portStart command to start the port. 




The configuration of an iSCSI gateway is illustrated in Figure 16. 
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5. Issue the portShow command to verify the configuration. 
For example: 



router : ac3inin> 


port stop 1 




port 1 stopped. 




router : admin> 


port type 1 g 




port 1 set to type GIGE 




router : ac3inin> 


portcfggige 1 -i 


192.168.0.10 -n 255.255.255.0 -g 


192.168.0.1 - 


p iscsl 




port 1 proto 


set to: iscsi 




port 1 proto 


ver set to: 


1 


router : adinin> 


port start 1 




port 1 started 




router : adinin> 


port show 1 




port 


1 info 






Configuration 


Current 


Name : 


port_l 




State: 


STARTED 


UP 


Type : 


GIGE 


GIGE 


Link Status: 


ENABLED 


UP 


IP addr: 


192 . 168 . 0 . 10 


192 . 168 .0.10 


Net mask: 


255.255.255.0 


255.255.255.0 


Default route 


: 0.0.0.0 


0.0.0.0 


Mac address: 


00:05:le:31:7e 


18 


Protocol : 


iscsi ver 13 


iscsi ver 13 


Licensed 


: YES 




Diag result 


: PASSED 





Displaying iSCSI portal information 

1. Issue the iscsiShow command to display a summary of all iSCSI sessions and port counters. 

2. Issue the iscsiPortShow command to display iSCSI sessions and port counters on a specific portal. 

Configuring iSCSI gateway zones 

Create and manage iSCSI gateway zones as you do any zones, but you must use iSCSI fully qualified 
names (IQN) to distinguish the iSCSI initiator members from other Fibre Channel zone members. The IQN 
format is: 

iqn . iscsi_driver : initiator 
where: 

iscsi_driver is the name of the iSCSI driver 
initiator is the name you assign to the initiator 

For example, the follov/ing IQN indicates that an initiator called initiator! is using the iSCSI driver called 
1 991 -05. com. microsoft: 

iqn. 1991-05. com. microsoft : initiatorl 

For more information on creating zones, see Chapter 7, "Creating and maintaining zones." 
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iguring CHAP 

The iSCSI standard supports access control with CHAP. You can configure the iSCSI gateway to use 
one-way authentication, where the target authenticates the initiator, or two-way authentication, where first 
the target authenticates the initiator and then the initiator authenticates the target. 



^ NOTE: The MP Router supports DH-CHAP only. It consists of the CHAP protocol combined with the 
Diffie-Hellman exchange. 

Configuring one-way authentication 

Issue the following command to configure one-way authentication for the target: 

iscsiauthcfg -i targetiqn -c secretl 

where targetiqn is the IQN for the Fibre Channel target and secretl is the shared secret. 
Remember the shared secret; you need it to configure the iSCSI driver on the iSCSI initiator. 
For example: 



router : aditiin> iscsiauthcfg -i iqn . 2 0 02-12 . com . brocade : 210 00004cf4c54e9 -c 
1234abcdl234 

Create [iqn. 2002-12 . com. brocade : 21000004cf 4c54e9 , ************] successful. 

Configuring two-way authientication 

1. Configure one-way authentication [secret!) as described in "Configuring one-way authentication." 

2. Issue the following command to configure authentication for the initiator: 

iscsiauthcfg -i iscsihostiqn -c secret2 

where iscsihostiqn is the IQN for the iSCSI initiator and secret2 is the shared secret, which must 
be different from secretl. 

Remember the shared secret; you need it to configure the iSCSI driver on the iSCSI initiator. 

For example: 

router : admin> Iscsiauthcfg -i iqn. 1991-05. com. microsoft:isil54110 -c 5678abcd5678 

Create [iqn. 1991-05 . com. microsoft : isil54110 , ************] successful. 

Rennoving a CHAP secret 
Issue the following command: 

iscsiauthcfg -d ignname 

where iqnname is the IQN of the initiator or the target. 

To add or remove a DH-CHAP secret in Secure Fabric OS, see "Configuring a secure XPath OS DH-CHAP 
secret" on page 54. 

ministering iSCSI configurations 

When multiple iSCSI portals are defined on one MP Router, they share information, such as IQN-to-WWN 
mapping and CHAP secrets. If you have iSCSI portals defined on more than one MP Router, you can use 
the IP fabric configuration server (iFCS) to perform out-of-band sharing of iSCSI gateway configuration 
information across the MP Routers. The iFCS function distributes the IQN-to-WWN mapping of each iSCSI 
host and their shared CHAP secret configuration to all IP-aware switches in the fabric. This distribution 
enables iSCSI hosts to move from one switch to another switch within a fabric. 

The MP Router on which you enable iFCS— the primary iFCS roufer— distributes and synchronizes the 
information to the other MP Routers, and continues to do so whenever there is a change in any IP storage 
configuration. 
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A secondary switch automatically becomes the primary if the current primary is removed from the fabric. 
When this occurs, the primary selection is based on the second and third least-significant bytes of the 
switch WWN. The secondary switch in the fabric with the larger value of those two bytes becomes the 
primary. For example, a secondary with a WWN of 1 0:00:00:05:le: 15:84:00 becomes primary over 
another secondary with a WWN of 1 0:00:00:05: le: 12:de:00 because 0x1 584 is larger than 0x1 2de. 

Enabling and disabling iFCS 

The MP Router on which you enable iFCS becomes the primary iFCS router. The iFCS function is disabled 
by default. 

Use the following commands to enable or disable iFCS: 
Issue the if csEnable command to enable iFCS. 

On the primary iFCS router, issue the ifcsDisable command to disable iFCS. 

Displaying iFCS information 

Once the primary iFCS router has distributed and synchronized the configuration information across MP 
Routers, you can display information about the entire iSCSI configuration from any MP Router in the fabric. 

The types of information you can view are described in Table 7. 



Table 7 iFCS information 



To display 


Use the command 


Parameter 


iFCS information 


if csShow 


none 


IQN-to-WWN mapping table 


iscsiWwnAlloc 


none 


Zoning information 


iscsiWwnAlloc 


-V 


CHAP information 


iscsiAuthCf g 


none 



iFCS behavior during configuration download 

The status of iFCS is indicated by the iscsi . if csEnableStatus entry in the configuration file. 
If iFCS is enabled, the entry reads iscsi . if csEnableStatus : YES 
If IFCS is disabled, the entry reads iscsi . if csEnableStatus :N0 

Table 8 summarizes the resulting iFCS status for a fabric when a configuration file is downloaded to that 
fabric. 



Table 8 Effect of downloading a configuration file with iFCS enabled or disabled 



iFCS status in configuration file 


iFCS enabled in destination file 


Result 


iscsi . if csEnableStatus : YES 
(enabled) 


YES 


The sv/itch joins the fabric as a 
secondary iFCS sv/itch. 


iscsi . if csEnableStatus :N0 
(disabled) 


NO 


The sv\/itch joins the fabric with 
iFCS disabled. 


iscsi . if csEnableStatus : YES 
(enabled) 


NO 


The switch joins the fabric as the 
primary iFCS switch. 


iscsi . if csEnableStatus :N0 
(disabled) 


YES 


The switch joins the fabric as a 
secondary iFCS switch. 
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Working with the WWN mapping table 

The WWN is an HP Organizational Unique Identifier (OUI). 
You can use the iscsiWwnAlloc command to assign WWNs. 
Displaying the WWN list 

Issue the iscsiWwnAlloc command with no arguments. 

You can use the aliShow, zoneShow, and cfgShow commands with the -i option to display lONs. 
Adding an iSCSI initiator to the WWN mapping table 

Issue the following command on the primary iFCS router, where IQN_name is the ION of the initiator: 

iscsiwwnalloc -i IQN_name 

Removing an iSCSI initiator from the WWN mapping table 
Issue the following command: 

iscsiwwnalloc -d IQN_name 

If you cannot log in to the MP Router from an iSCSI initiator, there might be an error in 
iSCSI-name-to-port-WWN mapping. Log in as admin. Issue the iscsiWwnAlloc command to display 
the WWN allocation map. If there are two WWN entries for the initiator, perform the following steps: 

1. If the ION is used in zones or aliases, remove it from them. 

2. Delete the ION using the following command, where lQN_name is the ION of the initiator: 

iscsiwwnalloc -d IQN_name 

3. Re-create the ION by issuing the following command on the primary iFCS router, where IQN_name is 
the ION of the initiator: 

iscsiwwnalloc -i IQN_name 

4. If necessary, re-create the ION in zones or aliases using the zoneCreate or aliCreate command. 

Enabling and disabling failover 

You can take advantage of the high availability (HA) failover feature by defining multiple iSCSI portals 
from a TCP/IP network to a fabric. In this configuration, iSCSI drivers that support failover can fail over 
from one portal to another if the connection to the first portal is lost. 

For example. Figure 1 7 shows three iSCSI portals connecting a TCP/IP network to a fabric. IP! , the 
primary, is on one MP Router (iSCSI Gateway 1); IP2 and IPS are on a second MP Router (iSCSI Gateway 
2). When HA failover is enabled, if the path including IPl fails, the iSCSI initiator tries IP2, and if not 
successful, IPS. 
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Figure 17 iSCSI high availability configuration 
Enabling fa i lover 

1. Issue the ifcsEnable command to enable iFCS. 

2. Issue the following command, where WWN is the WWN of the failover switch: 

icscif ailoveradd WWN 

With reference to Figure 1 7, the following example shows how to specify that iSCSI Gateway 1 should 
fail over to iSCSI Gateway 2, whose WWN is 10:00:00:05:le:15:a9:00. 

router : admin> Iscsifalloveradd 10 : 00 : 00 : 05 : le : 15 : a9 : 00 

The failover switch is added 

Disabling failover 

On the primary iFCS router, issue the IcsciFailoverDelete command: 

router : admin> iscsif ailoverdelete 
The failover switch is deleted 
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7 Creating and maintaining zones 



This chapter provides procedures for using XPath OS zoning in the following sections: 

• Zoning terminology, page 86 

• Zoning enforcement, page 86 

• Configuring zones, page 87 

You can use zones to create logical subsets of the fabric to accommodate environments such as closed user 
groups or functional areas within the fabric. Any zone object connected to the fabric can be included in 
one or more zones. Zone objects can communicate only with other objects in the same zone. For example, 
consider Figure 18, which shows that: 

• Three zones are configured, named Red, Green, and Blue. 

• Loop 1 is a member of both the Red zone and the Green zone. Both Server 1 and Server 3 have access 
to Loop 1 . Server 1 and Server 3 do not have access to each other. 

• Loop 2 is not a member of any zone and is therefore inaccessible to other devices in the fabric. 

• Server 2 can access the RAID 1 and RAID 2 devices, but not Loop 1 , Server 1 , or Server 3. 

• The RAID 1 device is a member of the Blue zone and the Green zone. Server 2 and Server 3 have 
access to it, but Server 1 does not. 

• Only Server 2 has access to the RAID 2 device. 




Figure 18 Sample zone configuration 

A zone member can be specified by using a domain, port pair, node WWN, or the port WWN. The 
mechanisms needed to enforce zoning are discussed next. 



1^ NOTE: Zones used with an MP Router have additional member naming requirements. Use port WWNs 
for Fibre Channel attached nodes with MP Router LSAN zones. 
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Zoning terminology 

A zone is a specified group of fabrioconnected devices, also called zone objects. Any device or zone 
object connected to the fabric can be included in one or more zones. Zone objects v/ithin a zone can 
communicate only v/ith other zone objects in the same zone. 

After zoning is enabled, if a device is not explicitly defined in a zone, that device is isolated and is 
inaccessible to other devices in the fabric. 

Zone objects are grouped into zones, and zones are grouped into a zone configuration. Zones can 
overlap; that is, a zone object can belong to more than one zone and a fabric can have multiple zones. 
You can create multiple zone configurations; hov/ever, only one configuration can be enabled in the fabric 
at a time. 

Zoning enforcement 

To design, configure, and administer Fibre Channel zoning on your fabric, you need to understand the 
difference between a zone member specification and the mechanism used for zoning enforcement. XPath 
OS supports two basic zoning enforcement mechanisms: 

• Software-enforced zoning (also called soft zoning) 

• Hardware-enforced zoning (also called hard zoning) 

Soft zoning 

in soft zoning, the Name Server, getting its information from the zone server, limits the targets returned to a 
Fibre Channel initiator only to those that Fibre Channel initiator can communicate with (as specified by the 
zoning configuration). This is the method required by the Fibre Channel standards FC-SW-2, FC-GS-3, and 
FC-GS-4. If the Fibre Channel host bus adapters (HBAs) are standards-compliant, this method is reliable. 
The standard requires that HBAs purge their address tables and query the Name Server upon receipt of a 
Fibre Channel registered state change notification (RSCN). This ensures that all entries in the HBA address 
table correspond to members of the same zone of which the HBA is a member. 

With soft zoning, an initiator that is a member of a zone has access to the names and addresses of other 
members of the zone only, and so cannot address frames to devices outside of the zone. 

XPath OS soft zoning is industry standards-based. It is compatible with hard zoning, with Fibre Channel 
switch zoning implementations, and with WWN and domain, port member types. 

You can specify soft zones with the conf igureZoning command. 

Hard zoning 

Hard zoning enforcement must be used in those situations in which the HBAs are not standards-compliant, 
for example, when your hardware predates the standards. Since hard zoning is not standards-based, 
different implementations are possible, but hard zoning is frequently implemented by switch ports 
maintaining lists of allowed source and destination ID pairs. If a frame S_ID/D_ID pair is not on a port's 
list of allowed pairs, the frame is not transmitted. 

In XPath OS hard zoning, the frame source and destination addresses are compared to allowed addresses 
at the MP Router ingress F Port or FL Port (for devices directly attached to the MP Router) or at the egress 
F_Port or FL Port (for devices directly attached to a Fabric OS-based switch). The details of hard zoning 
enforcement are not needed to configure zones or for routine administration of the MP Router; however, 
see Appendix A, "Hard zoning background," if you would like to learn more about hard zoning 
enforcement. 

The MP Router hard zoning implementation is compatible with other HP StorageWorks switches. 

Zone server compatibility 

The zone server maintains the zone configuration information used for both soft and hard zoning, so a 
fabric can simultaneously use both hard and soft zoning. The zone server distributes the soft zoning 
information to the Name Server and the allowed S_ID/D_ID pairs to the appropriate ports for hard zoning. 
XPath OS hard zoning can coexist with other implementations of hard zoning, although XPath OS hard 
zoning cannot necessarily share zoning information with other hard zoning implementations. 



86 Creating and maintaining zones 



The MP Router zone server implementation complies with Fabric OS 2.6.x, 3.x, and 4.x. In multiswitch 
configurations, the MP Router also complies with the FC-SW2 zone server specification. The maximum 
number of members allowed in the zone server depends on the size of the zone database; the effective 
zone database can have a maximum of 4096 zone members and 1 024 zones (including fabric assisted 
zones). The maximum zoning database size is 128 KB. 

Standards and zoning compatibility 

In a multiswitch fabric configuration with HP switches, a change to a zone definition is not reflected in other 
switches until the configuration that contains that zone is enabled. This feature complies with FC-SW2 
standards. 

Although software enforcement is standards-based and hardware enforcement is proprietary, there is no 
standards-based method of exchanging zone information between conforming and nonconforming 
methods. For example, HP Fabric OS-based switches provide hardware enforcement by maintaining, at the 
target egress port, a list of switch ports permitted to communicate with the target. 

Configuring zones 

The following procedure outlines basic zone configuration and includes an example of configuring zones 
on multiple fabrics for an LSAN zone. Table 9 on page 89 describes zoning commands. 

The MP Router can be included in zones using either domain, port or WWN naming. Fabric OS 
switches and XPath OS MP Routers enforce hard zoning for both WWN and domain, port zone object 
naming. However, if a zone configuration on one switch uses WWN naming and an identical zone 
configuration on another switch uses domain, port naming, the configurations do not merge, and the 
fabric segments. If you use domain, port naming, HP recommends that you use the configure 
command to set the domain ID so that it persists across reboots, power cycles, failovers, and fabric 
reconfiguration. 

The zone configuration is stored in the configuration file. This enables you to upload and download the 
zoning configuration as a text file and to export a zone configuration to another switch easily. 



^ NOTE: Zones used with an MP Router have additional member-naming requirements. Use port WWNs 
for Fibre Channel attached nodes with MP Router LSAN zones. Each zone object defined— alias, zone, 
zone configuration— must have a unique name. Include a space after each comma in zoning commands 
that contain commas. 



Innplementing zoning 

1. Review the existing zoning configurations using the cfgShow command. 

2. Create an alias: 

router : adinin> alicreate "hostl", "1,6" 

Alias Create Successful 

3. Create zones: 

router : admin> zonecreate "zonel", "hostl" 

Zone Create Successful 

router : admin> zonecreate "zone2", "1,7" 

Zone Create Successful 

4. Create a zone configuration: 

router : admin> cfgcreate "backupcfg", "zonel; zone2" 

Cfg Create Successful 
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5. Check that the zone configuration is correct: 



router : admin> zoneshow 


Defined 


configurations : 


Cfg: 


backupcf g zonel ; zone2 


Zone : 


zonel 




hostl 


Zone : 


zone2 




1,7 


Alias 


: hostl 




1,6 


Effective configuration: 


No configuration enabled 



6. Enable the zone configuration: 

router : admin> cfgenable "backupcf g" 

Cfg Enable Successful 

7. Save the zone configuration: 

router : admin> cfgsave 
Cfg save Successful 

8. Review the enabled configuration to verify that the enabled configuration is correct: 



router : admin> 


cfgshow 


Defined configurations: 


Cfg: backupcf g zonel ;zone2 


Zone : 


zonel 




hostl 


Zone : 


zone2 




1,7 


Alias : 


hostl 




1, 6 


Effective configuration: 


cfg: backupcf g 


Zone : 


zonel 




1,5 


Zone : 


zone2 




1,7 


router : admin> 





Mapping iSCSI names 

The zone-related commands and alias-related commands convert iSCSI names (which are preceded with 
the characters iqn.) into WWNs from the preallocated WWN pool. 

Specific zone-related commands are zoneCreate, zoneAdd, and zoneRemove. 

Specific alias-related commands are aliCreate, allAdd, and allRemove. 

Zone information with an iSCSI name can be retrieved with the aliShow, zoneShow, and cfgShow 
commands using the -i option. 

For more information about iSCSI name mapping with WWN, see "Working with the WWN mapping 
table" on page 82. 
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Implementing an iSCSI name in zoning 

1. Create an alias: 

router : admin> alicreate "ALIAS_2", "Ign. 2001-04 .com. example : arraysa86' 

Alias Create Successful 

2. Create a zone: 

router : admin> zonecreate "ZONE_C", "iqn. 2002-04 .com. example : arraysa86' 

Zone Create Successful 

3. Check the zone configuration: 

router : adinin> cfgshow -i 
Defined configurations : 
Cfg: cfg_iscsi ZONE_C 
zone : ZONE_C 

iqn. 2002-04. com . example : arraysaSS 

alias: ALIAS_2 

ign . 2001-04 . com . example : arraysaSS 
Effective configuration: 
cfg: cfg_iscsi 
Zone : ZONE_C 

iqn. 2002-04. com . example : arraysa86 

Zoning commands 

Use the commands in Table 9 to configure and manage your zone configuration. See the HP 
SforageWorks XPafh OS 7.4.x command reference guide for detailed command information. 



Table 9 Zoning commands 



Command 


Description 


Zone management commands 


configure Zoning 


Configures zoning 


conf igZoningShow 


Displays zone configurations 


Alias commands 


aliAdd 


Adds a member to a zone alias 


aliCreate 


Creates a zone alias 


aliDelete 


Deletes a zone alias 


aliRemove 


Removes a member from a zone alias 


aliShow 


Displays alias information 


Zone commands 


zoneAdd 


Adds a member to a zone 


zoneCreate 


Creates a zone 


zoneDelete 


Deletes a zone 


zoneRemove 


Removes a member from a zone. 


zoneShow 


Displays zone information 


Configuration commands 
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Table 9 Zoning commands (continued) 



Command 


Description 


cfgAdd 


Adds a zone to a zone configuration 


cf gActvShow 


Prints the effective zone configuration 


cf gClear 


Clears all zone configurations 


cf gCreate 


Creates a zone configuration 


cf gDelete 


Deletes a zone configuration 


cf gDisable 


Disables a zone configuration 


cf gEnable 


Enables a zone configuration 


cf gRemove 


Removes a zone from a zone configuration 


cf gSave 


Saves zone configurations in flash memory 


cf gShow 


Displays zone configurations in flash memory 


cf gSize 


Displays the size of the configurations in flash memory 


Qloop commands 


gloopAdd 


Adds a member to a Qloop 


gloopCreate 


Creates a Qloop 


gloopDelete 


Deletes a Qloop 


gloopRemove 


Removes a member from a Qloop 


gloopShow 


Prints Qloop information 


Fabric assist zone commands 


f azoneAdd 


Adds a member to a fabric assist zone 


f azoneCreate 


Creates a fabric assist zone 


f azoneDelete 


Deletes a fabric assist zone 


f azoneRemove 


Removes a member from a fabric assist zone 


f azoneShow 


Prints fabric assist zone information 



Creating and maintaining zones 



8 Using ISL trunking 



This chapter provides information on HP Interswitch Link (ISL) trunking, and consists of the following 
sections: 

• How exchange-based trunking works, next 

• Enabling trunking, page 92 

• Managing trunking, page 92 

• Trunking commands, page 93 

How exchange-based trunking works 

The MP Router exchange-based trunking feature increases overall bandwidth by distributing network traffic 
across ISLs connecting pairs of switches. More precisely, load balancing occurs across all equal-cost paths 
to a destination domain. 

This functionality works in two situations: 

• Between two MP Routers 

• From an MP Router to any other Fabric OS-based switch 

Exchange-based trunking also works across multiple EX Ports when MP Router ports are configured as 
Fibre Channel routers. 

Exchange-based trunking is supported at both 1 Gbit/sec and 2 Gbit/sec link speeds. There is no 
restriction on the port location/ numbers that can be part of the trunk. 

Exchange-based trunking is activated when you install the appropriate HP licensed feature bundle. To 
create a trunk, use the trunkSet command. 



^ NOTE: MP Router exchange-based trunking is not supported with Continuous Access EVA. For all 

Continuous Access EVA configurations using FCIP, you must set trunking to SID_DID or none. See the FCIP 

portcfgf cip command. 



1^ NOTE: Fibre Channel routing link-cost calculation uses a simple formula based only on link speed. 



When exchange-based trunking is enabled, all equal-cost paths are used for sending traffic to the given 
destination domain. Each ingress port contains a list of egress ports that can be used to reach a 
destination domain. On receiving a frame at the ingress port, the following fields in the Fibre Channel 
frame header are used to determine which egress port to use: 

• Source ID (SJD) 

• Destination ID (DJD) 

• Originator Exchange ID (OXJD) 

This scheme guarantees in-order delivery within a given exchange. 

Exchange-based trunking does not depend on having exchange-based trunking operating on the 
destination switch; the routing decision for any given frame of data is made at the origin switch. Thus, the 
choice of which ISL to take always occurs when an MP Router is the source switch and any other switch is 
the destination switch. If the other switch is not an MP Router, the return traffic does not benefit from 
exchange-based trunking load balancing. 

MP Routers are compatible with other HP StorageWorks switches. However, they are not compatible with 
frunk groups (groups of four ports) of HP ISL trunking in Fabric OS 4.2 and earlier. When an MP Router 
has multiple ISLs to a different model HP StorageWorks switch, traffic from the MP Router to the other model 
is load balanced using exchange-based trunking. Traffic from the other model to the MP Router is load 
balanced at a granularity of initiator device, target device pair. That is, rather than at a 
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data-frame-by-data-frame level, load is instead rebalanced each time an initiator or target device's 
connection or disconnection impacts the routing behavior of a given ISL path. 

All ingress ports share all available routes to a destination domain. There is a maximum of 16 routes to a 
destination domain. 

In the fabric illustrated in Figure 19, Domain 100 egress ports 1, 2, 3, and 4 can be used to reach 
destination Domain 200. All these egress ports have an equal cost of 1000 (routes through Domain 100 
ports 1, 2, and 3 are direct 1-Gbit/sec links to Domain 200; the route through Domain 100, Port 4 to 
Domain 300 and then to Domain 200 has two 2-Gbit/sec links). The host port (Domain 100, port 6) has 
all these egress ports available for routing frames to Domain 200, Port 1 1 . 



Exchange-Based Trunk 



Host 





1 8 


Domain=100 








■ 



































1 Gbit/sec (link cost 1000) 

2 Gbit/sec (linl< cost 500) 




Target 



Domain=300 



Figure 19 Sample exchange-based trunking configuration 
The follov/ing are characteristics of exchange-based trunking: 

• Any E_Port can be part of the trunk (and can be connected to any port). 

• No interaction betv/een the sv/itches is required to enable the feature. 

• Any mixture of link speed E Ports is supported; all links must have an equal cost to the destination 
domain. 

• Load balancing distribution might not be exactly equal; in a four-port trunk, for example, the load 
sharing might not be exactly 25% each. 

• Load balancing is ineffective if the exchange ID does not vary (for example, same OXJD usage). 
However, this is not a problem with typical FC-4 protocols like FCP, IP over Fibre Channel, and so on. 

ibling trunking 

Exchange-based trunking is activated when the appropriate license bundle is installed. You can activate it 
by entering a license key, available from your switch supplier, and using the trunkSet command. When 
exchange-based trunking is activated, trunking is automatically implemented for any eligible ISLs. Trunking 
is enabled or disabled separately on each switch. You are not required to have exchange-based trunking 
enabled or disabled uniformly across a fabric or on multiple FCRs. 

You can verify and activate licenses through the command line interface (CLI) or through Advanced Web 
Tools. For instructions on activating a license, see ""Licensed features" on page 24" or the HP 
SforageWorks XPath OS 7.4.x Advanced Web Tools administrator guide. 

ISL trunking is supported in HP fabrics, but not in McDATA or mixed fabrics. 

naging trunking 

This section provides information on managing exchange-based trunking on a switch. 



1^ NOTE: The trunking feature is disabled by default and can be enabled only after the trunking license is 
installed. 



Using ISL trunking 



Determining whether the trunking feature is enabled on your switch 

1 . Log in as admin. 

2. Issue the trunkShow command: 

router : adinin> trunkshow 
Trunking is disabled 

Enabling trunking on a switch 

1 . Log in as admin. 

2. Issue the trunkSet command: 

router : adinin> trunkset 
Trunk feature enabled 

All Fibre Channel ports that passed POST are enabled for trunking. If the switch was part of a fabric, the 
fabric reconfigures. 

Disabling trunking on a switch 

1 . Log in as admin. 

2. Issue the trunkReset command: 

router : admin> trunkreset 
Trunk feature disabled 

All trunking on the switch is disabled. If the switch was part of a fabric, the fabric reconfigures. 
Checking for traffic distribution from ingress port to destination domain 

1. Connect fabrics with multiple paths from one switch to another. 

2. Connect hosts on one switch to targets on another switch. 

3. Issue the topologyShow command and determine the total number of equal-cost ISLs from the ingress 
port to the remote domain. 

4. Check routes assigned to an ingress port to reach a destination domain, using the urouteShow 
command. 

The number of routes from an ingress port to a remote domain should be equal to the total number of 
equal-cost ISLs to that domain, as determined from the topologyShow command output in step 3. 

5. Run traffic tests from the hosts to the targets. 

6. Review the load-balancing configuration using the portPerf Show command. 

Trunking commands 

Table 1 0 lists commands used to configure and manage exchange-based trunking. For detailed 
information on these commands, see the HP StorageWorks XPath OS 7.4.x command reference guide. 



Table 10 Trunking commands 



Command 


Description 


lodReset 


Disables in-order delivery 


iodSet 


Enables in-order delivery 


iodShow 


Displays current in-order delivery setting 


portCf gSpeed 


Displays or sets the configured port speed 


portPerf Show 


Displays the performance of all ports on a switch at selected intervals 
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Table 10 Trunking commands (continued) 



^ 1 

Command 


Description 


topologyShow 


r\- 1 il r 1 • ■ 1 1 il 1 1 •■ 1 

Displays the tabric topology, as seen by trie local switch 


trunkReset 


r\- 1 1 ■ 1 - •■ 1 

Disables trunking on a switch 


trunks et 


Enables trunking on a switch 


trunkShow 


Displays whether trunking is enabled or disabled on the switch 


urouteShow 


Displays the unicast routing information for a port 



ng ISL trunking 



9 Monitoring system logs 



This chapter discusses the following topics: 

• System error log, next 

• Port log, page 97 

• Using the syslog daemon, page 98 

There are three log file systems in the XPath OS: 

• The system error log displays system daemon errors, in addition to all events from the event log. 

• The port log displays port information. 

• The event log displays events only. 

Log entries for all three logs are described in the HP StorageWorks XPath OS 7.4.x system error messages 
reference guide. 

For most MP Router troubleshooting tasks, you can use the errShow command to refer to the system error 
log. The system error log is formatted to match the Fabric OS error message format; it provides a complete 
set of system messages. This chapter includes general information on the format and severity of error log 
entries and provides procedures for viewing and clearing the event log. 

The port log displays port events, such as port down, link events, and fabric segmentation. This chapter 
provides information on viewing the port log. 

The event log provides a limited set of event messages, but does not display errors from the firmware 
subsystems. 

A limited amount of storage is shared by the three logs on the MP Router. You can configure the XPath OS 
syslog daemon to copy log entries to a server. 

See the HP StorageWorks XPath OS 7.4.x system error messages reference guide for information on the 
meaning of specific entries and information on using the log. 

System error log 

View this log using the errShow command. The error log displays system errors, such as faulty or failing 
daemon processes in the firmware, as well all the events listed in the event log. Table 1 1 describes the 
commands that manage the system error log. 

System error messages are saved in the /var/ log/messages directory. When the message file reaches 
51 2 KB, the XPath OS archives the log with the file name messages . 0 .gz, and creates a new system 
error log. There can be a total of five archived files on the system, named messages . 0 . gz through 
messages . 4 . gz. As each archive file is added, XPath OS rearranges the files so that messages . 0 . gz 
is the newest archive and messages . 4 . gz is the oldest. After the maximum of five archive files is 
reached, the oldest archive file is replaced with the next oldest. The errShow command displays the 
contents of the current system error log only; it does not display archived messages. 



Table 1 1 Managing the system error log 



Command 


Description 


errShow 


Displays the contents of the system error log. 


errClear 


Clears the contents of the system error log. 



Message severity levels 

There are six severity levels for messages, ranging from Panic to Debug. The definitions in Table 1 2 can be 
used as general guidelines for troubleshooting. See the HP StorageWorks XPath OS 7.4.x system error 
messages reference guide for complete error message descriptions; review the descriptions thoroughly 
before taking action. 
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Table 1 2 Message severity levels 



Event level 


Description 


0 = Panic 


Panic messages indicate that a specific softv/are subsystem has detected a fatal or 
unrecoverable error condition. Examples are memory allocation failure, system call 
failure, and softv/are detection of problems v/ith the ASIC or v/ith hardv/are 
subsystems. These errors usually indicate partial or complete failure of a subsystem. 


1 = Critical 


Critical messages indicate that the softv/are has detected serious problems that 
eventually cause a partial or complete failure of a subsystem if not corrected 
immediately. A pov/er supply failure, for example, or a rise in temperature must 
receive immediate attention. Some of the critical errors might overlap in severity 
v/ith the panic messages. 


2 = Error 


Error messages indicate error conditions that do not significantly affect overall 
system functionality. For example, error messages might indicate time-outs on 
certain operations, failures of certain operations after retries, invalid parameters, 
or failures to perform requested operations. 


3 = Warning 


Warning messages highlight current operating conditions that should be checked 
before they cause failures. For example, a pov/er supply failure in a redundant 
system relays a v/arning that the system is no longer operating in redundant mode, 
and that the failed pov/er supply should be replaced or fixed. 


4 = Info 


Info messages report the current status of the system components other than error 
status. For example, detecting on and off line status of a fabric port. 


5 = Debug 


Debug messages are for debugging use only. They are produced by code inserted 
by the vendor to inform the user that a suspected problem has occurred. 



Viewing the system error log 

The system error log is a collection of all daemon-related errors (such as memory allocation errors), as v/ell 
as all events from the event log. 

1. Log in as user or admin. 

2. Issue the errShow command: 



router : admin> errshow 


The system error log content is 
Alternatively, you can use the 


displayed, with page breaks. 

-a option to display the system error log content v/ithout page b 


router : adinin> errshow 


-a 



Sample system error log message 

The follov/ing is a sample message from the system error log: 
router : adinin> errshow 
Error 239 



301 (EvtMgr) : Jan 26 13:10:34 

Info CM-EVENT_USER_LOGIN_SUCCESS, 4, User login: admin 
The fields in the event message are described in Table 1 3. 
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Table 13 System error log message field descriptions 



Example 


Variable name 


Description 


Error 239 


Error log buffer 
number 


Displays a rotating number that describes 
ii -1- ii 1 1 1 - ii 
the position the message holds in the 

buffer. This number is not permanently 

associated v/ith the error itself and should 

not be used v/hen contacting your service 

provider; provide the error code name 

i nQtf^nH 


3 01 (EvtMgr) 


Reporting process 
ID 


Displays the process ID and name of the 
module reporting the error. 


Jan 26 13 :10:34 


Date and time 

^tn mn 
1 1 1 


Displays the date and time the error 

mpQQnnp (~w"("iirrpH 


Info 


Severity level 


Displays the severity of the message: 
Panic, Critical, Error, Warning, Info, or 
Debug. 


CM-EVENT_USER_LOGIN_SUCCESS 


Error code name 


Displays the code name for the error. 


4 


Severity level 


Displays the severity of the error, in a 
numbered format: 

0 = Panic 

1 = Critical 

2 = Error 

3 = Warning 

4 = Info 

5 = Debug 


User login: admin 


Error description 


Displays error-specific data, such as the 
error reason. 



Clearing the system error log 

1 . Log in as admin. 

2. Issue the errClear command: 

router : admin> errclear 
The error log is cleared. 

Port log 

View this log using the portLogShow command. The port log displays port events, such as port dov/n, 
link events, and fabric segmentations. Events from this log are for information only. 

The XPath OS maintains an internal port log of all port activity. The port log stores entries for each port as 
a circular buffer. Each port has space to store 2048 log entries. If the port log is disabled, an error 
message is displayed. Once the log is full, the newest log entries overwrite the oldest log entries. Port logs 
are not persistent and are lost over power-cycles and reboots. 

Port log management 

Use the commands in Table 14 to view and manage port logs. 



XPath OS 7.4.x administrator guide 97 



Table 14 Port log management commands 



Command 


Description 


portLogClear 


Clears port logs tor all or specitied ports 


portLogDisable 


ni- II 1 1 r II -f- 1 1 

Disables port logs tor all or specitied ports 


portLogDump 


Displays port logs for all or specified ports, without page breaks 


portLogEnable 


Enables port logs for all or specified ports 


portLogShow 


Displays port logs for all or specified ports, with page breaks 



See the HP StorageWorks XPath OS 7.4.x command reference guide for detailed information on tfiese 
commands. 

Sample port log 

Following is a sample usage of the portLogShow command: 

router : admin> portlogshow 8 

Total records present = 12 

Number of records displayed = 12 



Time 






Module 


Event 


Port 


Len 


Log info 


18 


36 


52 


036 


fabctl 


PrtSCN 


08 


0 


st=l, Topo=2, Spd=0 


18 


36 


52 


361 


WKA 


Rx 


08 


140 


22fffffe, 00000000, 01a6f fff , 04000000 


18 


36 


52 


362 


fabctl 


PrtSCN 


08 


0 


st=2, Topo=2, Spd=2 


18 


36 


52 


365 


fabctl 


Debug 


08 


0 


Loading routes 


18 


36 


52 


379 


fabctl 


Tx 


08 


140 


23640800, OOfffffe, 01a60001, 02000000 


18 


36 


52 


379 


WKA 


Rx 


08 


140 


22fffffc, 0064 0800, 02cef ff f , 03000000 


18 


36 


52 


382 


nsd 


Tx 


08 


140 


23640800, OOfffffe, 02cef f f f , 02000000 


18 


36 


52 


382 


WKA 


Rx 


08 


32 


22fffffd, 0064 0800, 02cdf ff f , 62000000 


18 


36 


52 


383 


fabctl 


Tx 


08 


28 


23640800, OOfffffd, 02cd0001, 02000000 


18 


36 


52 


383 


WKA 


Ct_in 


08 


52 


02fffffc, 0064 0800, 02dlffff, 01000000 


18 


36 


52 


384 


nsd 


Tx 


08 


40 


03 64 0800, OOfffffe, 02dlf fff , 01000000 


18 


36 


52 


384 


WKA 


Ct_in 


08 


84 


02fffffc, 0064 0800, 02d0ffff, 01000000 



See the HP StorageWorks XPath OS 7.4.x system error messages reference guide for interpretation of the 
fields. 

Using the syslog daemon 

XPath OS can be configured to send error log messages to a UNIX® or Linux® host system or a host 
running any other operating system that supports standard syslogd functionality. This host system can be 
configured to receive error messages from the MP Router and store them in files on the computer hard 
drive, v/hich overcomes the size limitations of the internal log buffers. 

The syslogd process reads and logs messages to the system console, log files, other machines, and users, 
as specified by its configuration file. See the manual pages and related documentation for your particular 
UNIX host system for more information on the syslogd process and its capabilities. 

XPath OS syslogd CLI commands 

Table 1 5 shows the commands related to the syslogd configuration. See the HP StorageWorks XPath OS 
7.4.x command reference guide for more details. 



98 Monitoring system logs 



Table 15 syslogd configuration commands 



^ 1 

Command 


Purpose 


syslogdlpAdd 


Adds the IP address of the remote syslogd host to the MP Router 


sys 1 ogdIpRemove 


Removes the IP address of the remote syslogd host from the MP Router 


syslogdIpShow 


n il I- I f f- 1 1 1 in 1 1 il i i n n i 

bnows the list ot contigured syslogd Ir addresses on the Mr Router 


eventShow 


Displays messages from the event log on the MP Router 


errShow 


Displays messages from the system error log on the MP Router 


errClear 


Clears messages from the system error log on the MP Router 



Enabling syslogd 

This procedure explains how to configure the MP Router to dispatch error log messages to a remote 
syslogd host: 

1 . Log in as admin. 

2. Issue the syslogdlpAdd command with the following syntax: 

syslogdipadd IP_address_of_the_remote_syslogd_host 

3. Verify that the IP address was entered correctly by issuing the syslogdIpShow command. 

The following example shows how to configure the MP Router to dispatch error log messages to a remote 
syslogd host at IP address 10.10.10.1 and then verify that configuration: 

router : admin> syslogdipadd 10.10.10.1 

syslog . IP . address 10.10.10.1 is added 
router : admin> syslogdlpshow 
syslog. IP. address. 1 10.10.10.1 

Disabling syslogd 

To disable logging of error messages to a previously enabled remote syslogd host: 

1 . Log in as admin. 

2. Issue the syslogdipRemove command with the following syntax: 

sys 1 ogdipr emove I P_addr es s_o f _the_r emo t e_sys 1 ogd_hos t 

3. Verify that the IP address was deleted by issuing the syslogdIpShow command. 

The following example shows how to disable sending of error log messages to a previously configured 
remote syslogd host whose IP address is 1 0. 1 0. 1 0. 1 . 

router : admin> syslogdipremove 10.10.10.1 

syslog . IP . address 10.10.10.1 is removed 
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A Hard zoning background 



In XPath OS hard zoning, the frame source and destination addresses are compared to permitted 
addresses at the MP Router ingress F Port or FL Port (for devices directly attached to the MP Router) or at 
the egress F Port or FL Port (for devices directly attached to a non-HP sv/itch). You do not need to knov^ the 
details of hard zoning to configure zones or for routine administration of the MP Router. 

Each MP Router maintains a zone server. The zone server distributes to the ports allowed combinations of 
source add ress/desti nation address pairs. Hard zoning supports both WWN and domain, port member 
types. 

For hosts and targets directly connected to an MP Router, the source/destination pair for each frame 
entering the MP Router through an F_Port or FL Port is checked for zoning compliance. (See Figure 20 for 
an picture of this configuration.) The frame is discarded if the source/destination communication is not 
allov/ed by the zone rules. 

For frames originating from the host, the source/destination combination is checked against the zone 
membership list at MP Router 1, Port M. For frames originating at the target, the sou rce/desti nation 
combination is checked against the zone membership list at MP Router 1, Port N. 




Multiprotocol Router 
Figure 20 Host and target directly connected to the MP Router 

For hosts and targets directly connected to a homogeneous fabric with multiple MP Routers, the 
sou rce/desti nation pair for each frame entering the MP Router through an FPort or FLPort is checked for 
zoning compliance. The frame is discarded if sou rce/desti nation communication is not allowed by the 
zone rules. Figure 21 illustrates this combination. 

For frames originating from the host, the source/destination combination is checked against the zone 
membership list at MP Router 1 , Port W. For frames originating at the target, the source/destination 
combination is checked against the zone membership list at MP Router 2, Port Z. 




Multiprotocol Router 1 Multiprotocol Router 2 



Figure 21 Host and target in a homogeneous fabric 

For frames entering an MP Router through an E Port (Port M in Figure 22), the source domain is checked at 
the E Port; if the frame source domain is not an MP Router, the frame is tagged and passed through to the 
proper egress port. Port N in Figure 22. 

If the originating source domain is an MP Router, the zoning check has already been performed; no further 
zone enforcement is required. This is the situation shown in Figure 21 . At the egress port, the S_ID/D_ID 
pair is checked. 
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If the destination ID is directly attached to an MP Router port (as in Figure 22), the S_ID/D_ID pair is 
checked against the list of allowed combinations and is dropped if the pair is not permitted. 




switch Router 
Figure 22 Host and target in a heterogeneous fabric, combination 1 

If the destination ID is not directly attached to an MP Router port (as in Figure 23), the combination is not 
checked. 




Fibre Channel IMuitiprotocol Fibre Channel 
switch 1 Router switch 2 



Figure 23 Host and target in a heterogeneous fabric, combination 2 
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B Recovery kernel for XPath OS 7.4.x 



The recovery kernel (RK) is a part of the XPath OS that is stored in a reserved portion of memory, protected 
from erasure. This kernel provides the mechanics of the boot process: It allov^s the hardv/are to locate and 
boot the proper bank. The kernel finds either bankl or bank2 as bootable. This bank can then be used to 
recover firmware. 

The NVRAM value, cfgBank, dictates the bank from v/hich to boot. 

When entering NRAM values, use lowercase only. Mixed case is shown in this document for readability 
only. 

Software installation support environment 

Software installation is supported by an FTP/TFTP server that is accessible to (that is, it resides on the same 
network as) the MP Router. The server must be configured to support both FTP and TFTP services: TFTP is 
used to download the recovery kernel and FTP is used to download the base firmware and other packages. 

Most commonly, within the FTP/TFTP server the /tf tpboot directory is used to store the uploaded kernel, 
as well as the base firmware and third-party application packages. 

Unlike these packages, which are provided in an RPM format, the recovery kernel is a unique, proprietary 
file format. 

Using the recovery kernel 

The recovery kernel may be installed using the low level process monitor (PMON). Once installed, it can 
be used to install the base router firmware by issuing the f irmwareDownload command. 

Installing the recovery kernel using the process monitor 

1. Reboot the router. 

2. During the boot-up process, the MP Router displays a user boot delay prompt, showing the 
message: 

Press Return to boot or any key to enter PMON 

3. Press the space bar to cause the MP Router enter PMON. 

4. Enter the following commands, which are necessary to define the correct recovery kernel version and 
boot server IP address: 



router ; 


; PMON> 


set bankover l.S.x.y 


router : 


; PMON> 


set rootdir / 


router : 


; PMON> 


set basefile XPathRecoverAP7420 


router : 


; PMON> 


set bootserver xxx . xxx . xxx . xxx 


router : 


; PMON> 


set currentdnldproto tftp 


router : 


; PMON> 


set cfgbank bankO 


router : 


; PMON> 


netload -p Oxdeeddeed; g 



The boot server IP address is specific to a local site; your network administrator can provide this 
information. The recovery kernel version is provided with each software release. 

When you issue the netLoad command, the system begins downloading the recovery kernel, writes it 
into NVRAM, and then reboots the router. After the reboot completes, the system presents a recovery 
kernel prompt: 

Recovery Kernel% 

5. After you are presented with the recovery kernel prompt, install the base package firmware as 
described in "Installing the XPath OS 7.4.0 base firmware from the recovery kernel." 
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Installing the XPath OS 7.4.0 base firmware from the recovery kernel 

1 . Clear the storage of old files by entering: 

format all 

at the recovery kernel prompt and then pressing Enter at the recovery kernel prompt. 

2. After you are returned to a prompt, issue the f irmwareDownload command with the necessary 
parameters. 

In the follov/ing example, the boot server is located at the IP address 192 . 168 .25 . 100, the 
FTP-access user name is user, and the file xpath_os_v7 . 4 . 0 is stored in the /tf tpboot directory. 

recovery kernel% f irmwaredownload 192.168.25.100 user 

/tf tpboot/xpath_os_v7 .4.x 

3. When prompted, enter the passv/ord for the user name you entered in the previous step. 
See "Upgrading the XPath base and recovery kernel:" on page 37 for details, or see the HP 
StorageWorks XPath OS 7.4.x command reference guide for details about the f irmwareDownload 
command. 

4. After the software packages are installed, you must reboot the MP Router. 

The system is rebooted from bankl and the banks are synchronized before the system returns the login 
prompt. 
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Glossary 



AL_PA 

Arbitrated-loop physical address. A unique 8-bit value assigned during loop initialization to a port in an 
arbitrated loop. Also called arbitrated-loop parameters. 

alias 

A logical grouping of elements in a fabric. An alias is a collection of port numbers and connected devices 
used to simplify the entry of port numbers and WWNs when creating zones. 

alias server 

A fabric software facility that supports multicast group management, 
arbitrated loop 

A shared 100-Mb/sec Fibre Channel transport structured as a loop. Can support up to 1 26 devices and 
one fabric attachment. See also topology. 

arbitration 

A method of gaining orderly access to a shared-loop topology. 
ARP 

Address Resolution Protocol. A TCP/IP function for associating an IP address with a link-level address, 
backbone fabric 

An optional capability that enables scalable meta-SANs by allowing the networking of multiple FC routers, 
which connect to the backbone fabric via EB_Port interfaces. 

BB_Credit 

Buffer-to-buffer credit. The number of frames that can be transmitted to a directly connected recipient or 
within an arbitrated loop. Determined by the number of receive buffers available. See also buffer-to-buffer 
flow control. 

BB fabric 

A backbone fabric that connects FC routers. The FC routers communicate over the backbone fabric using 
Fibre Channel Router Protocol (FCRP). 

buffer-to-buffer flow control 

Management of the frame transmission rate in either a point-to-point topology or in an arbitrated loop. See 
also buffer-to-buffer flow control. 

configuration 

1 . A set of parameters that can be modified to fine-tune the operation of a switch. Issue the conf igShow 
command to view the current configuration of your switch. 

2. In HP StorageWorks zoning, a zoning element that contains a set of zones. The configuration is the 
highest-level zoning element and is used to enable or disable a set of zones on the fabric. See also zone 
configuration. 

congestion 

The realization of the potential of oversubscription. A congested link is one on which multiple devices are 
contending for bandwidth. 
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core PID 

Core switch port identifier. The core PID must be set for Fabric OS 3.1 and earlier switches included in a 
fabric of Fabric OS 4.1 switches. This parameter is located in the configure command of Fabric OS 3.1 
and earlier. All Fabric OS 4.1 switches and later use the core PID format by default; this parameter is not 
present in the configure command for these switches. 

credit 

In Fibre Channel technology, the number of receive buffers available to transmit frames between ports. See 
also buffer-to-buffer flow control. 

DJD 

Destination identifier. A three-byte field in the frame header that indicates the address identifier of the 
N_Port to which the frame is headed. 

defined zone configuration 

The set of all zone objects defined in the fabric. Can include multiple zone configurations. See also 
enabled zone configuration, zone configuration. 

DLS 

Dynamic load-sharing. Dynamic distribution of traffic over available paths. Allows for recomputing of 
routes when an Fx_Port or E_Port changes status. See also Fx Port, E Port. 

domain ID 

A unique identifier for all switches in a fabric, used in routing frames. Usually assigned by the principal 
switch, but can be assigned manually. The domain ID for an HP StorageWorks switch can be any integer 
from 1 through 239. 

E_D_TOV 

Error-detect timeout value. The minimum time a target waits for a sequence to complete before initiating 
recovery. Can also be defined as the maximum time allowed for a round-trip transmission before an error 
is declared. See also R_A_TOV. 

E_Port 

Expansion port. A standard Fibre Channel mechanism that enables switches to network with each other, 
creating an ISL. See also ISL. 

edge fabric 

A Fibre Channel fabric connected to an FC router through an EX_Port (where hosts and storage are 
attached in a meta-SAN). See also EX Port. 

enabled zone configuration 

The currently enabled configuration of zones. Only one configuration can be enabled at a time. See also 
defined zone configuration, zone configuration. 

EX_Port 

A type of E Port that connects an FC router to an edge fabric. EX_Ports limit the scope of fabric services, 
but provide device connectivity using FC-NAT. 

exchange 

The highest-level Fibre Channel mechanism used for communication between N_Ports. Composed of one 
or more related sequences, it can work in either one or both directions. See also N_Port. 



exported device 

A device that has been mapped between fabrics (a host or storage port in one edge fabric can be 
exported to any other fabric by using LSAN zoning). 

F_Poi1 

Fabric port. A port that is able to transmit under fabric protocol and interface over links. It can be used to 
connect an N_Port to a switch. See also FL Port, Fx_Port, N_Port. 

fabric 

A collection of Fibre Channel switches and devices, such as hosts and storage. Also called a switched 
fabric. See also SAN, topology. 

fabric name 

The unique identifier assigned to a fabric and communicated during login and port discovery, 
fabric port count 

The number of ports available for connection by nodes in a fabric, 
fabric services 

Codes that describe the communication to and from any well-known address, 
fabric topology 

The arrangement of switches that form a fabric. 
FAN 

Fabric address notification. Retains the AL PA and fabric address when a loop reinitializes, if the switch 
supports FAN. See also AL PA. 

PC router 

A platform running the HP StorageWorks Fibre Channel Routing Service or FC-to-FC routing (for instance, 
the MP Router) that enables two or more fabrics to share resources (such hosts or storage devices) without 
merging those fabrics. The platform could simultaneously be used as an FC router and as an FCIP tunnel. 

FC-0 

Lowest layer of Fibre Channel transport. Represents physical media. 
FC-2 

Layer of Fibre Channel transport that handles framing and protocol, frame format, sequence/exchange 
management, and ordered set usage. 

FC-3 

Layer of Fibre Channel transport that contains common services used by multiple N Ports in a node. 
FC-4 

Layer of Fibre Channel transport that handles standards and profiles for mapping upper-level protocols 
such as SCSI and IP onto the Fibre Channel Protocol. 

FCC 

Federal Communications Commission. 
FC-GS 

Fibre Channel generic services. 
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FC-GS-2 

Fibre Channel generic services, second generation. 
FC-GS-3 

Fibre Channel generic services, third generation. 
FCJP 

Fibre Channel over IP. 
FC-NAT 

Fibre Channel netv/ork address translation. 
FC-PH 

The Fibre Channel physical and signaling standard for FC-0, FC-1, and FC-2 layers of the Fibre Channel 
Protocol. Indicates signaling used for cable plants, media types, and transmission speeds. 

FC-PH-2 

Fibre Channel Physical Interface, second generation. 
FC-PH-3 

Fibre Channel Physical Interface, third generation. 
FCIP Tunneling Service 

The HP StorageWorks Multi-protocol SAN Routing Service that enables SANs to span longer distances 
than could be supported v/ith native Fibre Channel links. FCIP is a TCP/IP-based tunneling protocol that 
allov/s the transparent interconnection of geographically distributed SAN islands through an IP-based 
netv/ork. 

FCP 

Fibre Channel Protocol. Mapping of protocols onto the Fibre Channel standard protocols. For example, 
SCSI FCP maps SCSI-3 onto Fibre Channel. 

FCRP 

Fibre Channel Router Protocol. A protocol that enables LSAN sv/itches to perform routing between different 
edge fabrics, optionally across a backbone fabric. 

FCRS 

Fibre Channel Routing Service. The HP StorageWorks Multi-protocol SAN Routing Service that extends 
hierarchical netv/orking capabilities to Fibre Channel fabrics. Sometimes called FC-to-FC routing, FCRS 
enables devices located on separate fabrics to communicate v/ithout merging the fabrics. It also enables 
the creation of LSANs. 

PCS 

Fibre Channel sv/itch. 
FCS switch 

Refers to the HP StorageWorks Secure Fabric OS feature. One or more designated switches that store and 
manage security parameters and configuration data for all switches in the fabric. They also act as a set of 
backup switches to the primary FCS switch. See also backbone fabric. 



FC-SW-2 

The second-generation Fibre Channel Switch Fabric standard defined by ANSI. Specifies tools and 
algorithms for the interconnection and initialization of Fibre Channel switches to create a multiswitch Fibre 
Channel fabric. 

Fibre Channel 

The primary protocol used for building SANs to transmit data between servers, switches, and storage 
devices. Unlike IP and Ethernet, Fibre Channel was designed to support the needs of storage devices of all 
types. It is a high-speed, serial, bidirectional, topology-independent, multi-protocol, and highly scalable 
interconnection between computers, peripherals, and networks. 

Fibre Channel transport 

A protocol service that supports communication between Fibre Channel service providers. See also FSP. 
FID 

Fabric ID. Unique identifier of a fabric in a meta-SAN. 
firmware 

The basic operating system provided with the hardware. 
FL_Port 

Fabric loop port. A port that is able to transmit under fabric protocol and also has arbitrated-loop 
capabilities. Can be used to connect an NL Port to a switch. See also F Port, Fx Port, NL Port. 

flash 

Programmable nonvolatile RAM (NVRAM) memory that maintains its contents without power, 
frame 

The Fibre Channel structure used to transmit data between ports. Consists of a start-of -frame delimiter, 
header, optional headers, data payload, cyclic redundancy check (CRC), and end-of-frame delimiter. 
There are two types of frames: link control frames (transmission acknowledgements and so forth) and data 
frames. 

FS 

Fibre Channel service. A service that is defined by Fibre Channel standards and exists at a well-known 
address. For example, the Simple Name Server is a Fibre Channel service. See also FSP. 



FSP 

Fibre Channel Service Protocol. The common protocol for all fabric services, transparent to the fabric type 
or topology. See also FS. 

FSPF 

Fabric shortest path first. The HP StorageWorks routing protocol for Fibre Channel switches. 
FSS 

Fabric OS state synchronization. The FSS service is related to high availability (HA). The primary function 
of FSS is to deliver state update messages from active components to their peer standby components. FSS 
determines whether fabric elements are synchronized, and thus FSS compliant. 

FTP 

File Transfer Protocol. 
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FTS 

Fiber Transport Services. 
Fx_Port 

A fabric port that can operate as either an F Port or FL Port. See also F Port, FL Port. 
G_Porf 

Generic port. A port that can operate as either an E Port or an F Port. A port is defined as a G_Port when 
it is not yet connected or has not yet assumed a specific function in the fabric. See also F Port, FL Port. 

gateway 

Hardware that connects incompatible networks by providing translation for both hardware and software. 
For example, an ATM gateway can be used to connect a Fibre Channel link to an ATM connection. 

Gbit/sec 

Gigabits per second (1 ,062,500,000 bits per second). 
HA 

High availability. A set of features in HP StorageWorks switches that is designed to provide maximum 
reliability and nondisruptive replacement of key hardware and software modules. 

HBA 

Host bus adapter. The interface card between a server or workstation bus and the Fibre Channel network, 
header 

A Fibre Channel frame has a header and a payload. The header contains control and addressing 
information associated with the frame. 

hop count 

The number of ISLs a frame must traverse to get from its source to its destination, 
host 

A computer system that provides end users with services like computation and storage access, 
in-band 

Transmission of management protocol over Fibre Channel, 
initiator 

A server or workstation on a Fibre Channel network that initiates communications with storage devices. 
See also target. 

interswitch link 

See ISL. 

lOCTL 

I/O control. 
lOD 

In-order delivery. A parameter that, when set, guarantees that frames are either delivered in order or 
dropped. 

IP 

Internet Protocol. The addressing part of TCP. 



ISL 

Interswitch link. A Fibre Channel link from the E_Port of one switch to the E_Port of another. See also E_Port. 
JBOD 

Just a bunch of disks. A number of disks connected in a single chassis to one or more controllers. See also 
RAID. 

L_Port 

Loop port. A node port (NL_Port) or fabric port (FL_Port) that has arbitrated-loop capabilities. An L_Port can 
be in either Fabric Mode or Loop Mode. 

LAN 

Local area network. A network in which transmissions typically take place over fewer than 5 kilometers 
(3.4 miles). 

latency 

The time required to transmit a frame. Together, latency and bandwidth define the speed and capacity of a 
link or system. 

Link Services 

A protocol for link-related actions, 
login server 

The unit that responds to login requests. 
LSAN 

Logical storage area network. An LSAN enables device and storage connectivity that spans two or more 
fabrics. The path between devices in an LSAN can be local to a fabric or cross one or more FC routers and 
one or more backbone fabrics. 

LSAN zone 

The mechanism by which LSANs are administered. An FC router attached to two fabrics listens for the 
creation of matching LSAN zones on both fabrics. If this occurs, it creates phantom domains and FC-NAT 
entries as appropriate, and inserts entries for them into the name servers on the fabrics. LSAN zones are 
compatible with all standard zoning mechanisms. 

Mbit/sec 

Megabits per second. 
meta-SAN 

The collection of all devices, switches, edge and backbone fabrics, LSANs, and FC routers that make up a 
physically connected but logically partitioned storage network. LSANs span between edge fabrics using 
FC routers. In a data network, this would simply be called the network. However, an additional term is 
required to specify the difference between a single-fabric network (SAN), a multifabric network without 
cross-fabric connectivity (dual-redundant fabric SAN), and a multifabric network with connectivity 
(meta-SAN). 

metric 

A relative value assigned to a route to aid in calculating the shortest path (1 000 at 1 Gbit/sec, 500 at 
2 Gbit/sec). 
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MS 



Management Server. Allows a SAN management application to retrieve information and administer the 
fabric and interconnected elements, such as switches, servers, and storage devices. The MS is located at 
the Fibre Channel well-known address FFFFFAh. 

MSD 

Management Server daemon. Monitors the MS. Includes the Fabric Configuration Service and the 
Unzoned Name Server. 

MSRS 

Multi-protocol SAN Routing Services. An optional, licensed software bundle available on certain HP 
StorageWorks platforms, such as the MP Router, that includes the Fibre Channel Routing Service and the 
FCIP Tunneling Service. 

MTBF 

Mean time between failures. An expression of time, indicating the longevity of a device. 
N_Port 

Node port. A port on a node that can connect to a Fibre Channel port or to another N Port in a 
point-to-point connection. 

Name Server (SNS) 

A switch service that stores names, addresses, and attributes for up to 15 minutes and provides them as 
required to other devices in the fabric. SNS is defined by Fibre Channel standards and exists at a 
well-known address. Also called a directory service. 

NL_Port 

Node loop port. A node port that has arbitrated-loop capabilities. Used to connect an equipment port to 
the fabric in a loop configuration through an FL_Port. See also N_Port, Nx_Port. 

node 

A Fibre Channel device that contains an N Port or NL Port. 
node count 

The number of nodes attached to a fabric, 
node name 

The unique identifier for a node, communicated during login and port discovery. 
NR_Port 

A normal E_Port used to connect an FC router to a backbone fabric. 
NS 

Name Server. The service provided by a fabric switch that stores names, addresses, and attributes related 
to Fibre Channel objects. Can cache information for up to 15 minutes. Also called a Simple Name Server 
or a directory service. 

Nx_Port 

A node port that can operate as either an N_Port or NL_Port. 
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originator 

The Nx_Port that originated an exchange, 
out-of-bcnd 

Transmission of management protocol outside of the Fibre Channel network, usually over Ethernet. 
OX_ID 

Originator ID or exchange ID. Refers to the exchange ID assigned by the originator port, 
packet 

A set of information transmitted across a network. See also frame, 
parallel 

The simultaneous transmission of data bits over multiple lines, 
path selection 

The selection of a transmission path through the fabric. HP StorageWorks switches use the FSPF protocol. 
See also FSPF. 

persistent error log 

Error messages of a high enough level (by default, Panic or Critical) are saved to flash memory on the 
switch instead of to RAM. These messages are saved over reboots and power cycles, constituting the 
persistent error log. Note that each CP on an HP StorageWorks Core Switch 2/64 has its own unique 
persistent error log. 

phantom address 

An AL_PA value that is assigned to a device that is not physically in the loop. Also called phantom AL PA. 
See also AL_PA. 

phantom device 

A device that is not physically in an arbitrated-loop, but is logically included through the use of a phantom 
address. 

phantom domain 

See xiate domain. 

PID 

Port identifier. See also core PID. 
port 

In an HP StorageWorks switch environment, an SEP or GBIC receptacle on a switch to which an optical 
cable for another device is attached. 

port address 

In Fibre Channel technology, the port address is defined in hexadecimal. In the HP StorageWorks Fabric 
OS, a port address can be defined by a domain and port number combination or by area number. In an 
ESCON Director, the port address is an address used to specify port connectivity parameters and to assign 
link addresses for attached channels and control units. 

port log 

A record of all activity on a switch, kept in volatile memory. 
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port log dump 

A view of what happens on a switch, from the switch's point of view. The portlogdump command is used 
to read the port log. 

port name 

A user-defined alphanumeric name for a port, 
portncme 

The unique identifier assigned to a Fibre Channel port and communicated during login and port discovery. 
POST 

Power-on self-test. A series of tests run by a switch after it is turned on. 
protocol 

A defined method and set of standards for communication. Determines the type of error-checking, the 
data-compression method, how sending devices indicate an end of message, and how receiving devices 
indicate receipt of a message. 

R_A_TOV 

Resource-allocation timeout value. The maximum time a frame can be delayed in the fabric and still be 
delivered. See also E D TOV. 

RAID 

Redundant array of independent disks. A collection of disk drives that appear as a single volume to the 
server and are fault tolerant through mirroring or parity checking. See o/so JBOD. 

RCS 

Reliable Commit Service. Refers to HP-specific ILS command code, 
route 

With respect to a fabric, the communication path between two switches. Might also apply to the specific 
path taken by an individual frame, from source to destination. See also FSPF. 

routing 

The assignment of frames to specific switch ports, according to frame destination. 
RSCN 

Registered state change notification. A switch function that allows notification of fabric changes to be sent 
from the switch to specified nodes. The fabric controller issues RSCN requests to N_Ports and NL_Ports, but 
only if they have registered to be notified of state changes in other N Ports and NL Ports. This registration 
is performed through the State Change Registration (SCR) Extended Link Service. An N Port or NL_Port can 
issue an RSCN to the fabric controller without having completed SCR with the fabric controller. 

SAN 

Storage area network. A network of systems and storage devices that communicate using Fibre Channel 
protocols. See also fabric. 

SAN architecture 

The overall design of a storage network solution, which includes one or more related fabrics, each of which 
has a topology. 



SAN port count 

The number of ports available for connection by nodes in the entire SAN. 
scalability 

One of the properties of a SAN; the size to which a SAN topology can grow port and switch counts with 
ease. 

SCN 

State change notification. Used for internal state change notifications, not external changes. This is the 
switch logging that the port is online or is an Fx_Port, not what is sent from the switch to the Nx_Ports. 

SCR 

State change registration. Extended Link Service (ELS) requests the fabric controller to add the N_Port or 
NL_Port to the list of N_Ports and NL_Ports registered to receive the Registered State Change Notification 
(RSCN) Extended Link Service. 

SCSI 

Small Computer Systems Interface. A parallel bus architecture and a protocol for transmitting large data 
blocks to a distance of 1 5 to 25 meters. 

sequence 

A group of related frames transmitted in the same direction between two N_Ports. 
sequence initiator 

The N_Port that begins a new sequence and transmits frames to another N_Port. 
sequence recipient 

Serializing/ deserializing circuitry. A circuit that converts a serial bit stream into parallel characters and vice 
versa. 

serial 

The transmission of data bits in sequential order over a single line. 
SFP 

Small-form-factor pluggable. A transceiver used on 2-GB/sec switches that replaces the GBIC. 
soft zone 

A zone consisting of zone members that are made visible to each other through client service requests. 
Typically, soft zones contain zone members that are visible to devices using Name Server exposure of zone 
members. The fabric does not enforce a soft zone. Note that well-known addresses are implicitly included 
in every zone. 

SSH 

Secure shell. Used starting in HP StorageWorks Fabric OS 4.1 to support encrypted telnet sessions to the 
switch. SSH encrypts all messages, including the client sending the password at login. 

switch 

A fabric device providing bandwidth and high-speed routing of data via link-level addressing, 
switch name 

The arbitrary name assigned to a switch. 
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switch port 

A port on a switch. Switch ports can be E Ports, F Ports, or FL Ports. 
syslogd 

Syslog daemon. Used to forward error messages, 
target 

A storage device on a Fibre Channel network. See also initiator. 
TCP/IP 

Transmission Control Protocol Internet Protocol. A communications protocol developed under contract from 
the U.S. Department of Defense to internetwork dissimilar systems. 

telnet 

A virtual terminal emulation used with TCP/IP. Telnet is sometimes used as a synonym for the HP Fabric OS 
CLI. 

throughput 

The rate of data flow achieved within a cable, link, or system. Usually measured in bps (bits per second or 
b/sec). See also BB fabric. 

Time Server 

A Fibre Channel service that allows for the management of all timers, 
topology 

In Fibre Channel technology, the configuration of the Fibre Channel network and the resulting 
communication paths allowed. There are three possible topologies: 

• Point to point: A direct link between two communication ports. 

• Switched fabric: Multiple N_Ports linked to a switch by F Ports. 

• Arbitrated loop: Multiple NL_Ports connected in a loop. 

translate domain 

See xiate domain. A mode in which private devices can communicate with public devices across the 
fabric. 

trunking 

In Fibre Channel technology, a feature that enables distribution of traffic over the combined bandwidth of 
up to four ISLs between adjacent switches, while preserving in-order delivery. 

trunking group 

A set of up to four trunked ISLs. 
trunking ports 

The ports in a set of trunked ISLs. 
TS 

See Time Server 
tunneling 

A technique for enabling two networks to communicate when the source and destination hosts are both on 
the same type of network, but are connected by a different type of network. 
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U_Port 

Universal port. A switch port that can operate as a G_Port, E Port, F Port, or FL Port. A port is defined as a 
U_Port when it is not connected or has not yet assumed a specific function in the fabric. 

WANJOV 

Wide area network timeout value, 
well-known address 

In Fibre Channel technology, a logical address defined by Fibre Channel standards as assigned to a 
specific function and stored on the switch. 

WWN 

World wide name. An identifier that is unique worldwide. Each entity in a fabric has a separate WWN. 
xiate domain 

Translate domain. A router virtual domain that represents an entire fabric. Device connectivity can be 
achieved from one fabric to another, over the router and through this virtual domain, without merging the 
two fabrics. Also called a phantom domain. 

zone 

A set of devices and hosts attached to the same fabric and configured as being in the same zone. Devices 
and hosts within the same zone have access to others in the zone but are not visible to any outside the 
zone. 

zone configuration 

A specified set of zones. Enabling a configuration enables all zones in that configuration. See also defined 
zone configuration, enabled zone configuration. 

zoning 

A feature in fabric switches or hubs that allows segmentation of a node by physical port, name, or address. 
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